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U.S.  Department  of  Justice 

United  States  Attorney 
Southern  District  of  New  York 


The  Silvio  J.  Mollo  Building 
One  Saint  Andrew ’s  Plaza 
New  York,  New  York  10007 


July  18,2019 


BY  ECF 

The  Honorable  William  H.  Pauley  III 
United  States  District  Judge 
Southern  District  of  New  York 
500  Pearl  Street 
New  York,  NY  10007 

Re:  United  States  v.  Michael  Cohen,  18  Cr.  602  (WHP) 

Dear  Judge  Pauley: 

Pursuant  to  the  Court’s  February  7,  March  18,  and  July  17,  2019  orders,  the  Government 
attaches  redacted  copies  of  the  search  warrant  materials  that  were  the  subject  of  these  orders,  as 
well  as  a  redacted  copy  of  the  Government’s  July  15,  2019  status  letter.  An  index  of  the  attached 
documents  is  provided  below: 

Exhibit  1-18  Mag.  2969.  April  8,  2018  application,  affidavit,  and  search  warrants  for 
four  premises  and  two  cellular  phones  associated  with  Michael  Cohen. 

Exhibit  2-18  Mag.  2698.  April  9,  2018  application,  affidavit,  and  search  warrant  for  a 
hotel  room  associated  with  Michael  Cohen. 

Exhibit  3-18  Mag.  1696.  February  28,  2018  affidavit  and  search  warrants  for  email 
accounts  used  by  Michael  Cohen  and  three  other  individuals. 

Exhibit  4-18  Mag.  1697.  February  28,  2018  application,  affidavit,  and  search  warrant  for 
a  device  containing  the  results  of  three  prior  search  warrants  of  email  accounts  used  by 
Michael  Cohen. 

Exhibit  5-18  Mag.  2877.  April  5, 2018  affidavit  and  search  warrant  for  out  of  jurisdiction 
attachments  from  email  search  warrant  included  in  Exhibit  3. 

Exhibit  6-18  Mag.  2958.  April  7, 2018  application,  affidavit  and  search  warrant  for  three 
devices  containing  the  results  of  prior  search  warrants  of  email  and  iCloud  accounts  used 
by  Michael  Cohen. 


Exhibit  7-18  Mag.  2957.  April  7,  2018  application,  affidavit  and  search  warrant  for 
cellphone  location  information  for  two  cellular  phones  used  by  Michael  Cohen. 
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Exhibit  8-18  Mag.  2974,  April  8, 2018  affidavit  and  search  warrant  for  cellphone  location 
information  for  two  cellular  phones  used  by  Michael  Cohen. 

Exhibit  9  -  Government’s  July  15,  2019  status  letter. 


Respectfully  submitted, 


AUDREY  STRAUSS 
Attorney  for  the  United  States, 

Acting  Under  Authority  Conferred  by 
28  U.S.C.  §  515 


By: 


Thomas  McKSy^^licolas  Roos 

Assistant  United  States  Attorneys 
(212)  637-2200 


cc:  Counsel  of  Record  (by  ECF) 
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AO  106  (Rev.  06/09)  Application  for  a  Search  Warrant  

United  States  District  Court 

for  the 

Southern  District  of  New  Y ork 

In  the  Matter  of  the  Search  of 

(Briefly  describe  the  property  to  be  searched 
or  identijy  the  person  by  name  and  address) 

Four  Premises  and  Two  Electronic  Devices,  See 
Attached  Affidavit  and  Riders 

APPLICATION  FOR  A  SEARCH  WARRANT 

I  a  federal  law  enforcement  officer  or  an  attorney  for  the  government,  request  a  search  warrant  and  state  under 
penalty  of  peijury  that  I  have  reason  to  believe  that  on  the  following  person  or  property  (identify  Bk person  or  describe  the 

Attach^  . 

located  in  the  ■  Southern  District  of _ New  York _ ,  there  is  now  concealed  (identify  the 

person  or  describe  the  property  to  be  seized) 

PLEASE  SEE  ATTACHED  AFFIDAVIT  AND  RIDERS. 

The  basis  for  the  search  under  Fed.  R.  Crim.  P.  41(c)  is  (check  one  or  more): 
sT  evidence  of  a  crime; 

sT  contraband,  fruits  of  crime,  or  other  items  illegally  possessed; 
sT property  designed  for  use,  intended  for  use,  or  used  in  committing  a  dime, 

O  a  person  to  be  arrested  or  a  person  who  is  unlawfully  resfrained. 

The  search  is  related  to  a  violation  of: 

Code  Section  Ojfense  Description 

18  U.S.C.  s  371, 1005, 1014,  Conspiracy,  false  bank  entries,  false  statements  to  a  financial  institution, 

1343  and  1344,  and  wire  fraud,  bank  fraud,  and 

52  DSC  301 1 6  and  301 09  illegal  campaign  contributions  l 

The  application  is  based  on  these  facts:  | 

PLEASE  SEE  ATTACHED  AFFIDAVIT  AND  RIDER.  |, 

fif  Continued  on  the  attached  sheet.  [ 

□  Delayed  notice  of _ days  (give  exact  ending  date  if  more  than  30  days: - )  is  requested  | 

under  1 8  U.S.C.  §  3 1 03a,  the  basis  of  which  is  set  forth  on  the  attached  sheet.  ; 


Sworn  to  before  me  and  signed  in  my  presence. 

Date:  04/08/2018 

City  and  state:  A/  Y ^  P- .  /fo  fC  vo  /I  t 


Printed  haMectrmme 


^  Jvdge 's  signqture  \ 


Hon.  H^nry  8'  Pitman,  U.S  M^glstraW Judge 

PrUked  name  ar^  title 


j  4-8 MAG  2969 


Case  l:18-cr-00602-WHP  Document  48-1  Filed  07/18/19  Page  2  of  269 


UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  the  Application  of  the  United  ; 
States  of  America  for  a  Search  and  Seizure  : 
Wan-ant  for  the  Premises  Known  and  Described  : 

ISfew  ; 


as  (1)  502  Park  Avenue, _ 

York,  New  York  10022,  (2)  Michael  Cohen’s 
Office  at  30  Rockefeller  Plaza,  23rd  Floor,  New  ; 
York,  New  York  10112,  (3)  Safe  Deposit  Box  #  - 
^Bkocated  at  the  TD  Bank  Branch  at  500  Park  ; 
zwenue.  New  Yorlc,  New  York  10019,  and  (4)  ; 

-Eoews  Regency  Hotel7540“Park  AvenuerRoom 


1728,  New  York,  New  York  10065,  and  Any  i 
Closed  Containers/Items  Contained  Therein,  and  : 
the  Electronic  Devices  Known  and  Described  as  : 
(1)  an  Apple  iPhone  with  Phone  Number  ■■■; 
^^^^■and  (2)  an  Apple  iPhone  with  Phone  : 
Number 

Reference  No.  20 1 8R00 1 27 


TO  BE  FILED  UNDER  SEAL 

Agent  Affidavit  in  Support  of 
Application  for  Search  and  Seizure 

Warrant 


SOUTHERN  DISTRICT  OF  NEW  YORK)  ss.: 

Ipecial  Agent,  Federal  Bureau  of  Investigation,  being  duly  sworn, 

deposes  and  says: 

1.  Introduction 
A.  Affiant 

1,  I  am  a  Special  Agent  with  the  Federal  Bureau  of  Investigation  (“FBI”).  I  have  been 
a  Special  Agent  with  the  FBI  since  2009.  In  the  course  of  my  experience  and  training  in  these 
positions,  I  have  paiticipated  in  criminal  investigations  into  federal  offenses  involving  a  wide  array 
of  financial  crimes,  including  frauds  on  financial  institutions,  as  well  as  into  offenses  involving 
public  corruption.  I  also  have  training  and  experience  executing  search  warrants,  including  those 
involving  electronic  evidence. 

2.  I  malce  this  Affidavit  in  support  of  an  application  pursuant  to  Rule  41  of  the  Federal 
Rules  of  Criminal  Procedure  for  a  warrant  to  search  the  premises  specified  below  (the  “Subject 
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Premises”)  and  the  electronic  devices  specified  below  (the  “Subject  Devices”)  for,  and  to  seize, 
the  items  and  information  described  in  Attachments  A,  B,  C,  D,  E  and  F .  This  affidavit  is  based 
upon  my  personal  knowledge;  my  review  of  documents  and  other  evidence;  my  conversations  with 
other  law  enforcement  personnel;  and  my  training,  experience  and  advice  received  concerning  the 
use  of  electronic  devices  in  criminal  activity  and  the  forensic  analysis  of  electronically  stored 
infoi-mation  (“ESI”).  Because  this  affidavit  is  being  submitted  for  the  limited  purpose  of 


— establtshing  probable  cause,  it  doesmotinclude  all  the  facts  that  I  have  learned  during  the  course 


of  my  investigation.  Where  the  contents  of  documents  and  the  actions,  statements,  and 
conversations  of  others  are  reported  herein,  they  are  reported  in  substance  and  in  part,  except  where 
otherwise  indicated. 

B.  The  Subject  Premises  and  Subject  Devices 

3.  Subject  Premises-1,  Subject  Premises-2,  Subject  Premises-3  and  Subject  Premises- 

4  (collectively,  the  “Subject  Premises”)  are  particularly  described  as: 

a.  Subject  Premises-1  is  Apartment |^|located  inside  the  building  at  502 
Park  Avenue,  New  York,  New  York  10022.  The  building  located  at  502  Park  Avenue  is  a  32- 
floor  brick  residential  building.  Subject  Premises-1  is  located  on  the^^^|floor  of  the  building. 
Based  on  my  review  of  New  York  City  property  records,  I  have  learned  that  Michael  Cohen  and 


Laura  Cohen  own  Subject  Premises-1.^  Additionally,  as  described  below.  Subject  Premises-1  is 
Cohen’s  full-time  residence. 

b.  Subject  Premises-2  is  an  office  located  on  the  23rd  floor  of  the  building  at 
30  Rockefeller  Plaza,  New  York,  New  York  10112.  The  building  located  at  30  Rockefeller  Plaza 


1  As  noted  infra,  I  have  learned  that  on  or  about  October  28,  2015,  Cohen  transferred  Subject 
Premises-1  into  a  trust. 
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is  a  66-floor  office  building  that  spans  the  entire  block  between  Sixth  Avenue  and  Rockefeller 
Plaza.  Subject  Premises-2  is  located  on  the  23rd  floor  of  the  building  inside  of  the  offices  of  the 
law  firm  Squhe  Patton  Boggs.  The  office  is  assigned  to  Michael  Cohen.  As  deseribed  below, 
Michael  Cohen  works  and  conducts  meetings  at  Subject  Premises-2. 

e.  Subjeet  Premises-3  is  a  safety  deposit  box  located  inside  the  TD  Banlc 
braneh  loeation  at  500  Park  Avenue,  New  York,  New  York  10019.  Based  on  my  review  of  records 

"maintained  by  TD  Bank,“Thave  learned  that  th^safety-deposit  box  is  approximately  five  inches^by- 

ten  inches  in  size,  and  is  marked  as  box  The  safety  deposit  box  is  in  the  name  of  Miehael 
Cohen  and  Laura  Cohen. 

d.  Subjeet  Premises-4  is  Room  1728  located  inside  the  Loews  Regency  Hotel 
at  540  Park  Avenue,  New  York,  New  York  10065.  The  building  is  a  luxury  hotel  located  on  Park 
Avenue  and  61st  Street.  Subject  Premises-4  is  located  on  the  17th  floor  of  the  hotel.  Based  on  my 
review  of  emails  obtained  pursuant  to  search  warrants  described  below,  I  have  learned  that  on  or 
about  January  5,  2018,  Cohen  received  an  email  from  an  employee  of  Loews  Regency,  which 
included  a  price  quote  for  a  long-term  stay  suite  based  on  a  three-month  stay  fiom  January  8  to 
April  8, 2018.^  On  or  about  January  29, 2018,  Cohen  sent  an  email  to  aLoews  Regency  employee, 
stating,  in  pertinent  part:  “I  just  spoke  to  my  wife  and  she  has  scheduled  the  move  for  Thui'sday. 
Please  mark  down  that  we  will  be  talcing  possession  on  Thursday,  February  1st.”  Based  on  my 
review  of  cell  phone  location  data,  I  have  learned  that,  over  the  past  24  hours,  two  cellular  phones 
used  by  Cohen  have  been  located  in  the  vicinity  of  Subject  Premises-4.  In  particular,  on  oi  about 


^  Although  the  quoted  price  contemplated  a  three-month  stay  from  January  8  to  April  8,  it  appears 
that  Cohen  did  not  move  in  until  February  1,  and  as  of  today,  April  8,  cellphone  location 
infonnation  demonstrates  that  Cohen’s  cellular  phones  are  in  still  in  the  vicinity  of  Subject 
Premises-4. 


2017.08.02 


4 


Case  l:18-cr-00602-WHP  Document  48-1  Filed  07/18/19  Page  5  of  269 


April  8,  2018,  law  enforcement  agents  using  a  “triggerfish”  device  identified  Room  1728  as  the 
room  within  the  hotel  in  which  the  Subject  Devices  are  most  likely  present. 


Therefore,  I  believe  that  Cohen  is  temporarily  residing  in  Subject 


Premises~4. 


4.  Subject  Device-1  and  Subject  Device-2  (collectively,  the  Subject  Devices  )  aie 
particularly  described  as; 

— - — Sul^ject  Device-Tis  an^pple  iPhone  serviced  by  AT&T  with  thefelephone  number 


Based  on  my  review  of  records  maintained  by  AT&T,  I  have  learned  that  Subject 


Device-1  is  subscribed  to  Michael  Cohen.  Based  on  my  review  of  cellphone  location  information 
maintained  by  AT&T,  I  have  learned  that  Subject  Device-1  is  presently  located  in  the  Southern 
District  of  New  York. 

b.  Subject  Device-2  is  an  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number 


ased  on  my  review  of  records  maintained  by  AT&T,  I  have  learned  that  Subject 


Device-2  is  subscribed  to  Michael  Cohen.  Based  on  my  review  of  cellphone  location  information 
maintained  by  AT&T,  I  have  learned  that  Subject  Device-2  is  presently  located  in  the  Southern 
District  of  New  York. 

c.  Based  on  my  tiaining,  experience,  and  research,  and  from  consulting  the 
manufacturer’s  and  service  providers’  advertisements  and  product  technical  specifications 
available  online,  I  know  that  the  Subject  Devices  have  capabilities  that  allow  them  to,  among  other 
things:  malce  and  receive  telephone  calls;  save  and  store  contact  information;  send  and  receive 

^  Based  on  my  convei'sations  with  these  agents,  I  understand  that  it  is  also  possible  that  the  Subject 
Devices  are  one  floor  below,  in  Room  1628.  However,  as  noted,  I  understand  that  Cohen  received 
a  price  quote  for  a  long-term  stay  suite  and  is  residing  there  with  his  family.  Based  on  my 
conversations  with  FBI  agents  conducting  sui-veillance,  I  understand  that  Room  1728  appears  to 
be  a  suite,  whereas  Room  1628  appears  to  be  a  standard  room. 
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emails  and  text  messages;  download  and  run  mobile  telephone  applications,  including  encrypted 
call  and  messaging  application  such  as  WhatsApp,  Signal,  and  Dust;  take,  send,  and  receive 
pictures  and  videos;  save  and  store  notes  and  passwords;  and  store  documents. 

C.  The  Subject  Offenses 

5 .  For  the  reasons  detailed  below,  I  believe  that  there  is  probable  cause  to  believe  that 
the  Subject  Premises  and  Subject  Devices  contain  evidence,  fruits,  and  instrumentalities  of 
violations  of  18 -UtS^€^§§  1005  (false-banle  entries),  1014  (false-statements  to- a  financial- 
institution),  1343  (wire  fraud),  and  1344  (bank  fi-aud)  (collectively,  the  “Banlc  Fraud  Offenses”), 
52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions)  (the 
“Campaign  Finance  Offenses”),  and  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other 
Subject  Offenses)  (collectively,  the  “Subject  Offenses”). 

D.  Prior  Applications 

6.  The  FBI  and  the  United  States  Attorney’s  Office  for  the  Southern  District  of  New 
York  (“USAO”)  have  been  investigating  several  courses  of  criminal  conduct  by  Michael  Cohen. 
Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President  Donald 
Trump,  and  who  previously  seiwed  for  over  a  decade  as  an  executive  in  the  Trump  Organization, 
an  international  conglomerate  with  real  estate  and  other  holdings. 

7.  In  connection  with  an  investigation  then  being  conducted  by  the  Office  of  the 
Special  Counsel  (“SCO”),  the  FBI  sought  and  obtained  fi'om  the  Honorable  Beryl  A.  Howell,  Chief 
United  States  District  Judge  for  the  District  of  Columbia,  three  search  warrants  for  emails  and 
other  content  information  associated  with  two  email  accounts  used  by  Cohen,  and  one  search 
warrant  for  stored  content  associated  with  an  iCloud  account  used  by  Cohen.  Specifically: 
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a. 


On  or  about  July  1 8, 20 1 7,  the  FBI  sought  and  obtained  a  search  warrant  for 


emails  in  the  account  ^^^^|@gmail.com  (the  “Cohen  Gmail  Account”)  sent  or  received 
between  January  1, 2016  and  July  18,  2017  (the  “First  Cohen  Gmail  Warrant”). 

b.  On  or  about  August  8,  2017,  the  FBI  sought  and  obtained  a  search  warrant 

l^gmail.com  (the 


for  content  stored  in  the  iCloud  account  associated  with  Apple  ID  | 

“Cohen  iCloud  Account”  and  the  “Cohen  iCloud  Warrant”). 

— — - cr - On-or-abouGNovember  13,-20177  th^FBI  sought  and' obtained-a-seareh- 


warrant  for  emails  in  the  Cohen  Gmail  Account  sent  or  received  between  June  1,  2015  and 
November  13, 2017  (the  “Second  Cohen  Gmail  Warrant”). 

d.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  search 


warrant  for  emails  in  the  account 


I  (the  “Cohen  MDCPC  Account”)  sent  or 


received  between  the  opening  of  the  Cohen  MDCPC  Account^  and  November  13, 2017  (the  First 


Cohen  MDCPC  Warrant”). 

8.  The  SCO  has  since  referred  ceifain  aspects  of  its  investigation  into  Cohen  to  the 
USAO,  which  is  working  with  the  FBI’s  New  York  Field  Office.  As  part  of  that  referral,  on  or 
about  February  8,  2018,  the  SCO  provided  the  USAO  with  all  non-privileged  emails  and  other- 
content  information  obtained  pursuant  to  the  First  Cohen  Gmail  Warrant,  Second  Cohen  Gmail 
Warrant,  and  Cohen  MDCPC  Wan-ant.  On  or  about  March  7,  2018,  the  SCO  provided  the  USAO 


Based  on  my  review  of  this  war-rant  and  the  affidavit  in  support  of  it,  I  know  that  the  warrant  did 
not  specify  a  time  period,  but  the  affidavit  indicated  that,  pursuant  to  court  order,  the  service 
provider  had  provided  non-content  information  for  the  Cohen  MDCPC  Account  that  indicated  that 
the  account  contained  emails  fi  om  the  approximate  period  of  March  2017  through  the  date  of  the 
warrant. 
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with  all  non-privileged  content  obtained  pursuant  to  the  Cohen  iCloud  Warrant.^  A  filter  team 
working  with  the  SCO  had  previously  reviewed  the  content  produced  pursuant  to  these  warrants 
for  privilege. 

9.  On  or  about  Febmary  28, 20 1 8,  the  USAO  sought  and  obtained  search  warrants  for 
emails  in  the  Cohen  Gmail  Account  and  the  Cohen  MDCPC  Account,  among  other  accounts,  sent 
or  received  between  November  14, 2017  and  February  28, 2018  (the  “Thhd  Cohen  Gmail  Warrant 

'Wd  tlm“SecdimXoheir]VroCPC  WaiTanf’)— The  content  produced'pursuant  to  diese  warrantsds- 

subject  to  an  ongoing  review  for  privilege  by  an  SONY  filter  team.® 

10.  The  emails  search  wan'ants  described  above  ai'e  refen-ed  to  collectively  as  the 

“Cohen  Email  Warrants.” 

11.  On  or  about  April  7,  2018,  the  USAO  and  FBI  sought  and  obtained  a  warrant  for 
prospective  and  historical  cellphone  location  information  for  Subject  Device-1  and  Subject 
Device-2.  On  or  about  April  8, 2018,  the  USAO  and  FBI  sought  and  obtained  authority  to  employ 
an  electronic  technique,  commonly  knoAvn  as  a  “triggerfish,”  to  determine  the  location  of  Subject 
Device-1  and  Subject  Device-2. 

n.  Probable  Cause 
A.  Overview 

12.  The  United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  FBI 
are  investigating,  among  other  things,  schemes  by  Target  Subject  Michael  Cohen  (a)  to  defraud 
multiple  banks  from  in  or  about  2016  up  to  and  including  the  present,  and  (b)  to  make  an  illegal 

^  The  SCO  had  previously  provided  a  subset  of  this  non-privileged  content  on  or  about  Februaty 
2,  2018. 

®  On  or  about  February  28,  2018  and  April  7,  2018,  the  USAO  and  FBI  sought  and  obtained  Rule 
41  search  waiTants  authorizing  the  search  of  emails  and  content  obtained  pm'suant  to  previously 
issued  warrants  for  additional  subject  offenses. 
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campaign  contribution  in  October  2016  to  then-presidential  candidate  Donald  Trump.  As  noted, 
Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President  Donald 
Trump,  and  who  previously  served  for  over  a  decade  as  an  executive  in  the  Trump  Organization, 
an  international  conglomerate  with  real  estate  and  other  holdings. 

1 3 .  The  investigation  has  revealed  that  Cohen  has  made  affirmative  misrepresentations 
in  and  omitted  material  infoiTnation  from  financial  statements  and  other  disclosures  that  Cohen 

provided  to-multiple  banics-in  connection  with  a-transaetion  intended  to-relieve-Gohen  of 

approximately  $22  million  in  debt  he  owed  on  taxi  medallion  loans  from  the  banks.  As  set  forth 
in  detail  below,  in  these  financial  statements,  and  in  his  oral  and  other  written  statements  to  these 
banks,  Cohen  appears  to  have  (i)  intentionally  misrepresented  his  ability  to  pay  cash  by  failing  to 
disclose  cash  he  began  receiving  in  2017  from  new  consulting  work;  (ii)  significantly  understated 
his  total  holdings  of  cash  and  cash  equivalents;  (iii)  failed  to  disclose  tens  of  thousands  of  dollai's 
he  received  in  monthly  interest  income,  and  (iv)  failed  to  inform  the  banks  fiom  which  he  was 
seeldng  debt  relief  that  he  had  agreed  to  make  a  $3.8  million  cash  payment  to  a  third  party,^H 
connection  with  ^^^^^^^icquisition  of  the  taxi  medallions  securing  Cohen’s 
debt.  By  making  these  misrepresentations  and  material  omissions,  Cohen  avoided  making 
monthly  payments  on  his  loans,  and  attempted  to  fraudulently  induce  the  banks  to  relieve  him  of 
certain  repayment  obligations  and  personal  guarantees  that  Cohen  and  his  wife  had  signed. 

14.  Additionally,  the  investigation  has  revealed  that  shortly  before  the  2016 
presidential  election,  Cohen  made  a  payment  of  $130,000  fiom  a  limited  liability  corporation 
(“LLC”)  to  Stephanie  Clifford,  an  individual  who  is  alleged  to  have  had  an  extramarital  affair  with 
then-candidate  Trump.  This  payment  was  made  to  Clifford  in  exchange  for  an  agreement  not  to 
make  any  public  disclosures  about  her  alleged  affair  with  Trump.  As  set  forth  below,  there  is 
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probable  cause  to  believe  that  Cohen  made  this  payment  to  Clifford  for  the  purpose  of  influencing 
the  presidential  election,  and  therefore  that  the  payment  was  an  excessive  in-kind  contribution  to 
the  Trump  campaign. 

15.  Based  on  my  review  of  emails  obtained  jfrom  the  Cohen  Email  Warrants, 
information  obtained  pursuant  to  the  iCloud  Warrant,  and  documents  produced  pursuant  to 
subpoenas,  as  well  as  my  review  of  public  som  ces,  I  have  learned  that  Cohen  has  used  tire  Subject 

Premises  to-(a)  receive  documents  related-to  the  transaction  intended  to  relieve  Cohen  oThis-taxi- 

medallion  debt,  (b)  receive  documents  and/or  conduct  meetings  related  to  his  consulting  work,  (c) 
receive  documents  and/or  conduct  meetings  relating  to  his  finances  and  assets,  some  of  which,  as 
noted  above  and  as  detailed  hirther  herein,  he  has  concealed  from  the  banks  in  connection  with  the 
refinancing  of  his  taxi  medallion  debt,  (d)  receive  and  send  documents  relating  to  his  payment  to 
Chfford,  and  (e)  house  and  operate  electronic  devices  that  were  utilized  in  connection  with,  among 
other  things,  the  taxi  medallion  fransaction,  Cohen’s  consulting  work,  and  his  payment  to  Clifford. 
Specifically,  as  described  below.  Subject  Premises-1  likely  contains  evidence  concerning  Cohen’s 
taxi  medallion  loans,  his  negotiations  with  banks,  his  personal  finances,  his  consulting  work,  his 
tax  returns,  and  his  payment  to  Clifford,  as  well  as  electronic  devices  containing  such  evidence, 
all  of  which  constitute  or  contain  evidence  of  the  Subject  Offenses.  Additionally,  as  described 
below,  Subject  Premises-2  lilcely  contains  evidence  relating  to  Cohen’s  consulting  work,  his 
finances,  and  his  payment  to  Chfford,  as  well  as  electronic  devices  contauiing  such  evidence. 
Subject  Pi-emises-3,  as  described  below,  likely  contains  evidence  relating  to  Cohen’s  assets  and 
finances,  including  assets  that  may  not  have  been  disclosed  to  banks  in  connection  with  the 
refinancing  of  Cohen’s  taxi  medallion  debt  or  documents  relating  to  such  assets,  and  documents 
or  evidence  related  to  Cohen’s  payment  to  Clifford.  Subject  Premises-4  lilcely  contains  electronic 
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devices,  including  Subject  Device-1  and  Subject  Device-2,  which  themselves  contain  evidence  of 
the  Subject  Offenses,  including  concerning  Cohen’s  taxi  medallion  loans,  his  negotiations  with 
banks,  his  personal  finances,  his  consulting  work,  his  tax  returns,  and  his  payment  to  Clifford. 
Accordingly,  and  as  set  forth  in  more  detail  below,  there  is  probable  cause  to  believe  that  the 
Subject  Premises  and  Subject  Devices  will  include  evidence  of  the  Subject  Offenses. 

B.  Probable  Cause  Regarding  Subjects’  Commission  of  the  Subject  Offenses’ 

- - ^ - ^ ^ - The-Bank-Fraud-Scheme - - - - - ^ - 

(i)  Cohen ’s  Statements  to  Sterling  National  Bank 
1 6.  As  set  forth  in  detail  below,  in  20 14,  Cohen,  through  LLCs  controlled  by  him  and 
his  wife,  Laura  Cohen,  entered  into  a  series  of  loans  from  Sterling  National  Bank  (“Sterling”)  and 
the  Melrose  Credit  Union  (“Melrose”),  secured  by  taxi  medallions,  for  approximately  $20  million. 
Though  entered  into  by  LLCs,  the  loans  were  also  secured  by  personal  guai'antees  in  the  names  of 
both  Cohen  and  his  wife.  Over  time,  as  the  taxi  industry  weakened  and  the  medallions  lost  value, 
Cohen  sought  to  renegotiate  the  terms  of  those  loans  and/or  relieve  himself  fi  om  their  obligations, 
including  the  personal  guarantees.  As  part  of  that  effort,  Cohen  made  a  series  of  representations 
to  Sterling  and  Mehose  about  his  net  worth,  assets,  available  cash  and  income,  among  other  things. 
Specifically,  based  on  my  review  of  records  mahitained  by  Sterling  and  Melrose,  and  public 
sources  concerning  the  taxi  indushy  and  the  value  of  taxi  medallions,  as  well  as  my  participation 
in  interviews  with  a  Sterling  executive  vice-president  (the  “Sterling  Employee- 1”)  and  two  other 


’  In  the  following  recitation  of  probable  cause,  I  ifequently  refer  to  phone  calls  or  text  messages 
involving  Cohen.  The  text  messages  described  herein  as  sent  or  received  by  Cohen  were  all  sent 
or  received  from  the  telephone  numbers  associated  with  Subject  Device-1  or  Subject  Device-2. 
The  vast  majority  of  the  phone  calls  described  herein  made  or  received  by  Cohen  were  made  or 
received  by  the  telephone  numbers  associated  with  Subject  Device-1  or  Subject  Device-2,  although 
in  certain  limited  instances  Cohen  used  a  landline  or  other  phone. 

11 
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Sterling  employees  (“Sterling  Employee-2”  and  “Sterling  Employee-3  ),  I  have  learned,  among 
other  things,  the  following: 

a.  Taxi  medallions  are  small  metal  plaques  affixed  to  taxis.  Without  a  medallion,  it 
is  illegal  to  operate  ataxi  in  cities  with  medallion  systems,  such  as  New  York  City.  Cohen  and  his 
wife  own  multiple  LLCs  that  collectively  own  32  taxi  medallions  (each  EEC  owns  two 
medallions).*  Cohen’s  purchase  of  these  New  York  taxi  medallions  was  originally  financed  by 

loans^fi'om  Capital  One  banlc,  for  which  the  medallions  served  as  eollateraliT-Cohen  was  not-aYaxi- 

operator,  and  leased  his  medallions  to  a  third  party.  That  third  party  made  monthly  payments  to 
Cohen,  who  in  turn  used  some  of  those  proceeds  to  malce  his  monthly  loan  payments  to  Capital 
One. 

b.  In  early  2014,  Cohen  became  a  customer  of  Sterling  when  he  sought  to  refinance  a 
mortgage  on  a  rental  property  that  he  owned.  In  or  around  April  2014,  Cohen  raised  with  Sterling 
the  prospect  of  refinancing  his  taxi  medallion  loans,  which  were  then  at  Capital  One.  By  in  or  about 
September  2014,  Cohen  began  negotiating  a  lending  transaction  with  Sterling  that  would  allow 
Cohen  to  pay  off  his  loans  at  Capital  One  and  boiTow  more  money  fi-om  the  then-increase  in  value 
of  the  medallions.  According  to  Sterling  Employee-1,  in  2014,  prior  to  the  recent  upheaval  in  the 
taxi  industry — as  a  result  of  the  emergence  of  ride-sharing  services,  such  as  Uber  taxi  medallion 
loans  were  viewed  by  banks  and  investors  as  safe,  short  term  credits,  as  the  market  value  of  taxi 
medallions  was  consistently  rising.  Consequently,  taxi  medallion  loans  like  the  loans  held  by 
Cohen — were  fi-equently  refinanced  at  increasing  amounts  as  the  value  of  the  medallions  rose. 
According  to  Sterling  Employee-1,  borrowers  typically  cashed  out  the  increase  in  the  loan  amount 


*  One  of  these  companies.  Mad  Dog  Cab  Corp.,  was  jointly  owned  by  Sondi-a  Cohen,  who  I 
believe  is  Cohen’s  mother. 
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and  used  the  additional  funds  for  other  purposes.  Cohen  appears  to  have  followed  this  approach  in 
2014,  when  he  agreed  to  refinance  his  medallion  loans  for  approximately  $22  million,  which 
according  to  letters  from  Capital  One  in  Sterling’s  files — ^was  greater  than  his  previous  debt  at 
Capital  One  Bank  ($21  million,  of  which  $14.6  million  was  a  line  of  credit  to  Cohen).  This  allowed 
Cohen  to  cash  out  the  proceeds  from  the  transaction. 

c.  Based  on  my  review  of  records  maintained  by  Sterling,  I  have  learned  that  on  or 

aboufDecember  872014,-each-of  Cohen’  s  sixteentaxi  medallion-LLCs  entered  into  loan  agreements 

and  promissory  notes  with  Sterling  for  the  principal  sum  of  $1,375,000,  with  repayment  due  on 
December  8, 2016.  Each  loan  was  signed  by  Michael  or  Laum  Cohen,  depending  on  who  was  the 
sole  shareholder  of  the  LLC.  The  address  listed  for  each  of  the  LLCs  was  the  address  for  Subject 
Premises-1 .  The  loans  were  also  each  secured  by  a  security  agreement,  dated  the  same  day,  making 
the  medallions  collateral  for  the  notes.  To  give  Sterling  additional  security,  Michael  and  Laura 
Cohen  signed  personal  guarantees  and  confessions  of  judgment,  giving  Sterling  the  right  to  pursue 
collection  against  the  Cohens’  personal  assets  were  their  corporations  to  default  under  the  loan 
agreements.  The  personal  guaranty  agreements  stated  that  the  LLCs  had  offices  at  the  addiess  for 
Subject  Premises-1,  and  contained  a  notice  provision  that  stated  that  any  notices  required  by  the 
agreements  should  be  mailed  to  Subject  Premises-1 .  In  total,  Sterling  agreed  to  lend  approxunately 
$22  million  to  the  Cohens’  companies. 

d.  Pursuant  to  paificipation  agreements.  Sterling  transferred  45  percent  of  Cohen  s 
taxi  medallion  debt  to  Melrose.^ 


^  Melrose,  which  had  a  business  principally  focused  on  taxi  medallion  loans,  is  now  in 
conservatorship  by  the  National  Credit  Union  Administration  (“NCUA  ). 
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e.  In  evaluating  Cohen’s  requested  refinancing  of  the  taxi  medallions,  Sterling  (and 
Melrose,  consistent  with  its  participation  in  the  deal)  conducted  due  diligence.  At  Sterling  s 
request,  Cohen  provided  Sterling  with  a  statement  of  financial  condition,  dated  August  1,  2014 
(the  “August  2014  Financial  Statemenf ’),  which  indicated  that  Cohen  had  $100,740,000  in  total 
assets,  $23,550,000  in  total  liabilities,  and  a  net  worth  of  $77,190,000.^“  From  my  review  of  a 
Sterling  credit  memorandum,  dated  September  29,  2014,  I  loiow  that  Sterling  viewed  the 

"Fan^ioh  favorably  because,  accountrffg  for 

projected  to  be  positive,  the  value  of  the  collateral  (as  estimated  by  Sterling)  exceeded  $42  mUlion, 
and  the  net  worth  of  Cohen— who  was  the  direct  obligor  under  the  guarantee  agreements— was 
over  $77  million.  An  internal  Sterling  credit  and  risk  rating  analysis  report,  dated  October  20, 
2014,  recommended  approval  of  the  loans  for  substantially  the  same  reasons. 

f.  Based  on  my  review  of  records  maintained  by  Sterling  and  public  sources,  I  have 
learned  that  over  time,  the  collateral  bacldng  Cohen’s  loans  (taxi  medallions)  lessened  in  value  due 
to  the  rise  in  ride-sharing  companies.  Additionally,  Cohen  began  falling  behind  on  loan  payments 
to  Sterling  and  Melrose.  I  laiow  from  records  maintained  by  Sterling  and  an  interview  with  Sterling 
Employee-2  that,  beginning  in  or  ai'ound  September  2015,  Cohen  told  Sterling,  in  sum  and 
substance,  that  the  individual  leasing  Cohen’s  medallions  had  fallen  behind  in  making  pa5mients  to 
Cohen,  and  that  as  a  result,  the  monthly  cash  flow  from  his  taxi  medallions  had  been  reduced, 
leaving  him  with  a  shortfall  of  approximately  $16,000  each  month.  For  instance,  I  have  reviewed 
an  email  from  Sterling  Employee-2,  dated  September  9,  2015,  summarizing  a  call  with  Cohen 
which  according  to  the  email  and  toll  records  for  Cohen’s  cellphone  occurred  on  September  8, 

Cohen  subsequently  provided  Sterling  with  a  revised  statement  of  financial  condition,  also 
dated  August  1, 2014,  which  reported  assets  of  $99,420,000,  total  liabilities  of  $23,550,000,  and  a 
net  worth  of  $75,870,000. 
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2015— during  which  Cohen  told  Sterling  Employee-2,  in  sum  and  substance,  about  his  cash  flow 
problems  and  a  monthly  shortfall  of  approximately  $16,000.  In  that  same  email.  Sterling 
Employee-2  commented  that  despite  Cohen’s  statements,  his  personal  financial  information 
“indicate[d]  a  strong  ability  to  make  up  the  difference  in  payments.”  Cohen,  however,  according 
to  Sterling  Employee-2,  pushed  the  bank  for  a  reduction  in  Cohen’s  monthly  payments. 

g.  From  my  review  of  records  maintained  by  Sterling  and  my  participation  in  an 

Tirt^ie“^iWStMmg  Emp%ee=2rI  have  learned-that  Cohen  and  Sterling-Employee-2  spoke- 

again  on  September  28, 2015,  and  that  during  the  call  Cohen  stated,  in  sum  and  substance,  that  the 
individual  to  whom  Cohen  leases  the  medallions  had  again  reduced  monthly  payments  to  Cohen.  I 
Icnow  from  my  review  of  records  maintained  by  Sterling  that  between  in  or  about  September  2015 
and  November  2015,  Sterling  raised  the  possibility— both  internally  and  with  Cohen— of  Cohen 
posting  his  real  estate  holdings,  personal  residence,  or  some  other  collateral  as  additional  security 
for  the  banks.^^  According  to  these  records,  however,  Cohen  resisted  these  requests.  From  my 
review  of  loan  documents  and  records  maintained  by  Sterling,  I  loiow  that  in  or  about  November 
2015,  as  a  result  of  Cohen’s  representation  that  he  was  not  earning  sufficient  returns  on  his 
medallions  to  cover  monthly  interest  payments.  Sterling  and  Melrose  agreed  to  amend  their  loans 
with  Cohen  by,  among  other  things,  reducing  the  interest  rate  Cohen  paid  to  Melrose  and  extendmg 


the  loan  matoity  date  to  December  8, 2017. 

h.  I  know  from  intei-views  with  Sterling  Employee-1  and  Sterling  Employee-2,  as  well 

as  emails  I  have  reviewed,  that  in  or  about  October  2016,  Cohen  told  Sterling  Employee-1  that 


Cohen  had  a  potential  buyer  of  his  taxi  medallions,  named  j 


[who  would  agree  to 


Based  on  my  review  of  property  records,  I  laiow  that  on  or  about  October  28,  2015,  ai  oun 
the  time  period  when  Sterling  raised  the  possibility  of  Cohen  posting  his  personal  residence— 
Subject  Premises- 1— as  collateral,  Cohen  fransferred  Subject  Premises-1  mto  a  trust. 
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assume  Cohen’s  debt  with  Sterling  and  Mehose.  Based  on  my  review  of  records  maintained  by 
Sterling,  as  well  as  the  interviews  with  Sterling  Employee-1  and  Sterling  Employee-2  referenced 
above,  I  Icnow  that  by  or  before  October  2016,  Cohen  had  entered  into  negotiations  to  sell  his  sixteen 
corporate  toH[|||Hm 

for  the  balance  of  the  loans,  which  at  the  time  was  $21,376,000.  I  know  from  my  review  of  records 


maintained  by  Sterling,  and  my  participation  in  an  interview  with  Sterling  Employee-2,  that  as  a 

conditiomof  the^ansfer  of  the^medalliomloans — ^and  beeause-Sterling— was-unfamiliarwvith^^^^| 

Sterling  requested  that  Cohen  malce  a  substantial  principal  payment  on  the  loan,  of 
approxhnately  one  million  dollars,  prior  to  the  transfer.  Cohen  rejected  this  request  initially.  But 
on  or  about  January  3 1, 2017,  Cohen  told  SterUng  Employee- 1,  in  sum  and  substance,  that  he  would 
make  a  one  million  dollar  principal  reduction  payment  in  order  to  move  forward  with  the  medallion 
transfer  deal  with  Indeed,  in  an  email  sent  by  Cohen  to  Sterling  Employee-2  on  or 

about  February  22,  2017,  Cohen  confirmed  that  he  “agreed  to  pay  down  1  million  from  the  loan 
amount.” 

i.  Pursuant  to  the  participation  agreements  between  Sterling  and  Melrose,  Sterling 
was  required  to  secure  Melrose’s  agreement  to  participate  in  the  transfer  of  the  taxi  medalhon  debt 
fi-om  Cohen  to  ^m|||||m  On  or  about  April  17,  2017,  Sterling  sent  a  memorandum  to 
Melrose  summarizing  the  terms  of  the  proposed  transaction,  and  noting  the  requirement  that 
Melrose  agree  to  the  terms.  On  or  about  May  2,2017,  Sterling  Employee- 1  told 
that  Melrose  had  agreed  to  the  deal  in  principle,  and  that  Sterling  would  be  sending  the  parties  a 


term  sheet  shortly. 

j.  In  order  for  the  banlcs  to  conduct  diligence  and  evaluate  the  proposed  fransaction 
fully,  they  requested  financial  information  from  the  parties.  On  or  about  June  7,  2017,  Sterling 
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Employee-1  emailed  Cohen  to  request  an  “updated  personal  financial  statement,”  completed 
jointly  with  Cohen’s  wife,  and  Cohen’s  most  recent  federal  income  tax  return.  On  or  about  June 
8, 2017,  Cohen  emailed  Sterling  Employee-1  a  Sterling  personal  financial  statement  form  that  had 
been  filled  out  by  hand,  which  referenced  a  statement  of  financial  condition,  dated  May  1,  2017 
(the  “May  2017  Financial  Statemenf’)  that  was  also  attached.  The  May  2017  Financial  Statement 
included  a  cover  letter  fi-om  Cohen’s  accountant,  Jeffrey  Getzel,  stating,  in  sum  and  substance,  that 

theinformation  in  tire  statement  came  from  Cohen  and  that  Getzel  had  nofeonfirmed-its  accuracy 

or  completeness.  The  May  2017  Financial  Statement  stated  that  Cohen  had  total  assets  of 
$41,955,000,  total  liabilities  of  $39,130,000,  and  a  net  worth  of  $2,825,000.  The  May  2017 
Financial  Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in  cash, 
$26,155,000  in  closely  held  companies  (such  as  the  taxi  medallion  entities  and  his  real  estate 
holdings),  $3,200,000  in  real  estate  investments,  and  his  $1 1,000,000  personal  residence.^^ 

k.  Based  on  my  review  of  reports  of  law  enforcement  interviews  of  Sterling 
Employee-1, 1  have  learned  that  Sterling  Employee-1  reviewed  the  May  2017  Financial  Statement 
with  Cohen  to,  among  other  things,  verify  its  accuracy,  and  Sterling  Employee-1  asked  Cohen  about 
specific  line  items  on  the  financial  statement,  including  the  cash  amount,  value  of  medallions,  and 
total  fiabilities.  Cohen  stated  to  Sterling  Employee-1,  in  sum  and  substance,  that  the  May  2017 
Financial  Statement  was  accurate. 

l.  On  or  about  August  16,  2017,  Sterling  Employee- 1  emailed  Cohen  and 
attaching  a  non-binding  term  sheet  memorializing  the  potential  transaction  between 


Based  on  my  review  of  Cohen’s  financial  statements,  I  know  that  the  precipitous  decline  in 
assets  from  his  2014  financial  statement  to  his  2017  financial  statements  can  be  explained 
primarily  by  reported  depreciation  in  the  value  of  Cohen’s  real  estate  assets  and  medallion 
investments. 


2017.08.02 


17 


Case  l:18-cr-00602-WHP  Document  48-1  Filed  07/18/19  Page  18  of  269 


Sterling,  Melrose,  Cohen,  The  term  sheet  included  a  cover  letter  addressed 

to  Cohen  at  Subject  Premises- 1.  The  parties  negotiated  the  provisions  of  the  term  sheet  and,  on  oi 
about  September  5,  2017,  Sterling  Employee-1  sent  Cohen  a  copy  of  the 

executed  term  sheet.  According  to  the  term  sheet,  would  borrow  $20,000,000 

from  Sterling  and  Mehose,  to  be  secured  by  the  medallions  that  ^^^^^|vas  to  acquire  fiom 

Cohen. 

- gjT^^^spafTdf the  ^greeffl^Mraccordingio  the  teiTnsheetr$lT265;9 13  in  principal  (w^ 

is  what  would  remain  after  the  $20,000,000  payment  on  the  outstanding  loan  balance)  would  be 
repaid  by  Cohen  and  the  two  banks,  widi  Cohen  paying  fifty  percent  and  the  banlcs  dividing  the 
remaining  half  of  the  balance.  Based  on  my  review  of  an  internal  Sterling  credit  memorandum, 
dated  October  4, 2017,  the  parties  reached  a  preliminary  agreement  that  Cohen  would  pay  $632,956 
of  the  remaining  $1,265,912  principal  loan  balance,  and  Sterling  and  Melrose  would  absorb 
$357,167  and  $275,789,  respectively,  in  the  form  of  charge-offs.  According  to  Sterling  Employee- 
1,  Sterling  was  willing  to  divide  the  repayment  of  the  outstanding  principal  balance— despite  its 
prior  insistence  that  Cohen  make  a  principal  pay-down  of  at  least  one  million  dollars— because 
Cohen  represented  on  a  telephone  call  with  Sterling  Employee- 1,  in  sum  and  substance,  that  he  had 
insufficient  liquidity  to  pay  the  full  outstanding  principal  balance.  As  pait  of  the  agreement.  Sterling 
and  Melrose  also  agi'eed  to  relieve  Cohen  and  his  wife  of  the  personal  guai'antees  that  they  made 
on  behalf  of  the  LLCs.  Thus,  after  completing  the  ’^^^Jtransaction,  Cohen  would  no  longer 

have  had  any  outstanding  obligations  to  Sterling  or  Melrose. 

n.  Based  on  my  review  of  emails  sent  by  Sterling  employees,  I  have  learned  that 
because  the  h'ansaction  between  the  parties  was  subject  to  full  credit  underwriting  by  Sterling  and 
Melrose  (as  well  as  Melrose’s  regulators  at  NCUA),  in  August  and  September  2017,  Sterling 
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required  and  requested  additional  financial  statements  and  tax  returns  for  Cohen  and  | 
for  its  eredit  underwriting  process.  In  response  to  Sterling’s  requests,  on  or  about  September  25, 
2017,  Cohen  emailed  Sterling  Employee-2  a  copy  of  his  2016  tax  return.  The  tax  retmn  listed 
Cohen’s  mailing  address  as  Subject  Premises-1.  Additionally,  on  or  about  October  5, 2017,  Cohen 
i-e-sent  Sterling  Employee-2  a  copy  of  his  May  2017  Financial  Statement.  A  day  later,  on  October 
6, 2017,  Cohen  emailed  Sterling  Employee-2  a  statement  of  financial  condition,  dated  September 


3072ai7"(the'“September-20T7"Fmancial  Statement--)r - - — - - 

o.  Like  the  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
included  a  cover  letter  fi-om  Jeffrey  Getzel,  Cohen’s  accountant,  stating,  in  sum  and  substance,  that 
the  information  in  the  statement  came  from  Cohen,  and  that  Getzel  had  not  confirmed  its  accuracy 
or  completeness.  The  September  2017  Financial  Statement  stated  that  Cohen  had  total  assets  of 
$33,430,000,  total  liabilities  of  $45,630,000,  and  a  negative  net  worth  of  $12,200,000.^^  Notably, 
unlike  Cohen’s  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
represented  to  Sterling  that  Cohen  had  a  negative  net  worth.  The  September  2017  Financial 
Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in  cash,  $17,630,000  in 
closely  held  companies  (including  the  taxi  medallion  entities  and  his  real  estate  holdings),^ 
$3,200,000  in  real  estate  investments,  and  his  $1 1,000,000  personal  residence  (which,  for  the  first 


Based  on  my  review  of  Cohen’s  financial  statements,  I  Icnow  that  this  further  decline  in 
assets  can  be  explained  primarily  by  reported  depreciation  in  the  value  of  Cohen’s  real  estate  assets 
and  medallion  investments. 

I'l  Notably,  the  September  2017  Financial  Statement  valued  each  of  Cohen’s  thiity-two  New 
York  taxi  medallions  at  approximately  $180,187.50,  whicl^a^onsiderably  less  than  the 
$650,000  valuation  ascribed  to  each  medallion  in  the  Cohen-  ^^^^^|term  sheet. 
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time,  he  indicated  was  held  by  atrust).^^  The  September  2017  Financial  Statement  included  assets 
and  liabilities  not  held  in  Cohen’s  name,  such  as  various  entities  associated  with  his  taxi  medallions 
and  some  of  his  real  estate  investment  entities. 

p.  From  iny  participation  in  an  interview  with  Sterling  Employee-2,  and  my  review  of 
records  maintained  by  Sterling,  I  have  also  learned  that  around  the  time  Cohen  provided  Sterling 
with  these  financial  statements— i.e.,  in  or  ai'ound  September  2017 — Cohen  stopped  paying 

montlily  loan  payments  on  his  taximedallion  loans  altogether— According  to  Sterling-Employee 

2,  Cohen  informed  Sterling,  in  sum  and  substance,  that  he  had  insufficient  funds  to  pay  the  monthly 
principal  and  interest  payments  on  his  medallion  loans.  By  in  or  about  December  2017,  Sterling 
and  Melrose  had  not  been  paid  approximately  $276,937.92  in  monthly  principal  and  interest 
payments  on  the  medallion  loans.  Based  on  Cohen’s  financial  condition  as  conveyed  in  the 
September  2017  Financial  Statement,  and  his  delinquency  in  making  payments  to  Sterling,  among 
other  things,  the  bank’s  credit  underwriting  committee  determined  (and  memorialized  in  a 
December  2017  memorandum)  that  the  Cohen-’^^^^  transaction  was  favorable  for  the  bank 
-  that  is,  that^^^^^^vould  be  a  better  borrower  than  Cohen. 

q.  On  or  about  December  26,  2017,  Sterfing  sent  Cohen  a  demand  letter  requesting 
the  immediate  receipt  of  past-due  loan  payments.  The  demand  letter  was  addressed  to  Cohen  at 
Subject  Premises-1.  On  December  29,  2017,  Sterling  sent  Cohen  a  letter  stating  that  he  was  in 
default  under  the  loans  between  Sterling  and  Cohen’s  medallion  corporations.  The  notice  of 
default  was  addi'essed  to  Cohen  at  Subject  Premises-1 .  Cohen  did  not  make  an  iimnediate  payment 
on  the  loans,  but  instead  sent  an  e-mail  to  Sterling  Employee-1  on  or  about  January  24,  2018, 

Based  on  my  review  of  property  records  maintained  by  the  City  of  New  York,  and  my 
participation  in  an  interview  with  Getzel,  I  know  that  in  2015,  Cohen  transferred  his  residence  to 
a  trust.  He  did  not  disclose  that  transaction  to  Getzel  or  Sterling  until  in  or  about  September  2017. 
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stating  that  during  the  closing  of  the  Cohen“^^^^^^^|  transaction,  Cohen  would  “bring  all 
payments  up  to  date  as  well  as  deposit  the  payoff  differential.”  Cohen  also  requested  by  email  on 
Januaiy  24, 2018,  that  at  the  closing  of  the  Cohen-'^^^Jtransaction,  Sterling  provide  a  letter 
stating  that  all  of  Cohen’s  debts  have  been  satisfied  and  that  Cohen’s  personal  guarantees  of  the 
medallion  loans  had  been  terminated. 

r.  The  Cohen-^^^^^|transaction,  however,  did  not  close.  On  or  about  January 
_29^0187l;he^^^^^^^J’^attorney  emailed  attomeys-for^Sterling  and  stated-that— at  this- time- 
there  is  no  deal  with  Michael  Cohen.  Some  of  the  numbers  have  changed  and  we  are  not  prepared 
to  go  forward.” 

s.  Based  on  my  participation  in  the  interview  with  Sterling  Employee-2  and  my 
review  of  records  maintained  by  Sterling,  I  Icnow  that  after  the  Cohen-j^^^^Hdeal  fell  apart. 
Sterling  assigned  Cohen’s  loans  to  Sterling  Employee-3,  who  specializes  in  collecting  on 
defaulting  loans.  From  my  participation  in  an  intei-view  with  Sterling  Employee-3,  my  review  of 
telephone  call  notes  taken  by  Sterling  Employee-3,  and  my  review  of  telephone  records,  I  know 
that  Sterling  Employee-3  spoke  several  times  to  Cohen  on  or  about  January  30, 2018  about  paying 
down  and/or  restructuring  Cohen’s  outstanding  taxi  medallion  loans.  On  the  calls,  which  in  total 
lasted  more  than  an  hour,  Cohen  stated  in  sum  and  substance  that  he  did  not  have  more  than 
$1,250,000  to  pay  toward  the  medallion  loans.  On  the  call,  in  the  course  of  reviewing  the  failed 
Cohen-^^^^^l  transaction.  Sterling  Employee-3  questioned  Cohen  about  the  price 

^^^^^|vas  to  have  paid  for  each  medallion,  and  whether  there  was  a  side  agreement  between 
Cohen  and  Cohen  denied  that  there  was  any  side  agreement  with^^^^^| 

t.  On  or  about  Januaiy  31,  2018,  Cohen  emailed  Sterling  Employee-3  and  proposed 
paying  $500,000  to  bring  the  loans  current  and  $750,000  to  bring  the  principal  balance  to 
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$20,500,000.  Cohen  also  suggested  revised  monthly  interest  payment  amounts.  The  signature 
block  on  the  email  indicated  that  Cohen’s  address  was  the  address  for  Subject  Premises-2.  On  or 
about  January  31,  2018,  Sterling  Employee-3  responded  to  Cohen  and  stated,  in  sum  and 
substance,  that  Cohen  would  need  to  pay  the  entirety  of  the  overdue  payments  and  pay  down  the 
principal  balance  of  the  loan  to  $20,000,000  (in  total,  a  payment  of  approximately  $1,750,000), 
and  would  need  to  make  lar-ger  monthly  interest  payments. 

- UT-Cgfor about Febfua^lT^O  187 Cohen-emailed  Sterling-Employee»3  and-proposed 

“[pjayment  of  $1.250m  which  ALL  can  be  used  to  pay  down  principal,  if  [Sterling]  will  waive 
past  due  amounts,”  but  stated  “I  do  NOT  have  more  than  the  $1.250m.”  (Emphasis  hr  original.) 
Cohen  also  stated,  in  sum  and  substance,  that  he  had  insufficient  financial  resources  to  post 
additional  collater-al  or  pre-fund  monthly  payments.  The  signature  block  on  the  email  indicated 
that  Cohen’s  address  was  the  addr-ess  for  Subject  Premises-2.  Based  on  my  participation  in  an 
interview  with  Sterling  Employee-3,  I  have  learned  that  since  January  30,  2018,  Sterling  has 
continued  to  renegotiate  the  medallion  loans  with  Cohen  based  on  Cohen  s  representations  about 
his  current  financial  position.  In  particular,  according  to  Sterling  Employee-3,  Cohen  and  Sterhng 
have  an  agreement  in  principal  to  restructure  Cohen’s  loans  based  in  part  of  Cohen’s  agreement  to 
make  a  principal  payment  of  approximately  $750,000,  to  make  a  payment  of  $500,000  to  become 
current  on  interest  payments,  and  to  post  $192,000  in  cash  collateral  for  his  future  monthly 
payments  on  the  loan.  Cohen  also  agreed  to  pledge  an  interest  he  had  in  a  property.  Sterling 
Employee-3  has  stated  that  had  Cohen  indicated  he  had  more  than  $1,250,000  available  to  him. 
Sterling  would  have,  among  other  things,  negotiated  for  a  larger  reduction  to  the  principal  amount 
of  the  loan. 
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(ii)  Cohen  Made  Material  Misrepresentations  About  His  Finances  to  Banks 

Cohen  Concealed  from  Sterling  and  Melrose  Cash  Derived  from  Consulting  Work 

17.  As  set  forth  in  detail  below,  despite  multiple  written  and  oral  representations  by 
Cohen  to  Sterling  (and,  by  extension,  Melrose^®)  that  he  had  insufficient  funds  to  pay  down  the 
principal  balance  of  the  medallion  loans,  malce  monthly  interest  payments,  or  pay  past-due 
amounts,  it  appears  that  between  2016  and  the  present,  Cohen  opened  and  maintained  bank 

accounts-at-FirsCRepublic-Banlc- (“First  Republic!!), _  and  then  received-millions  of-dollars_iiL 

consulting  payments  in  these  accounts,  which  he  did  not  disclose  to  Sterhng.  Cohen  set  up  these 
accounts  and  received  these  funds  during  the  very  period  in  which  he  made  disclosures  to  Sterling 
about  his  personal  finances  (including  his  assets  and  liabilities)  and  his  ability  to  make  payments 
on  the  medallion  loans.  In  these  disclosures  to  Sterling— and  despite  being  asked  about  these  bank 
accounts  by  his  accountant^ — Cohen  misled  the  banlc  by  claiming  he  had  insufficient  liquidity  to 
satisfy  his  obligations  or  meet  the  bank’s  demands,  while  withholding  information  about  these 
ongoing  revenue  streams  and  liquid  financial  assets  at  First  Republic. 

18.  Specifically,  based  on  my  review  of  documents  and  bank  records  produced 
pursuant  to  a  subpoena  by  Fii-st  Republic,  and  my  participation  in  and  review  of  reports  of 
interviews  Avith  a  First  Republic  sales  manager  (“Fii'st  Republic  Employee-1”)  and  a  First  Republic 
senior  managing  director  (“First  Republic  Employee-2”),  I  have  learned,  among  other  things,  the 
following: 


Based  on  my  review  of  a  report  of  an  interview  conducted  with  an  employee  of  Melrose,  1 
have  learned  that,  pursuant  to  the  participation  agi-eement  between  Sterling  and  Melrose,  Cohen’s 
financial  statements  and  other  records  in  Sterling’s  possession  were  forwarded  to  Melms^^h^ 
Melrose  could  make  a  determination  as  to  whether  to  approve  of  the  Cohen-'^^^^^ 
fansaction.  Based  on  my  review  of  reports  of  interviews  wifi^elros^mployees,  1  also  Know 
that  Cohen  called  employees  at  Melrose  regarding  the  Cohen-^^^^^|xansaction. 
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a.  Cohen  and  his  wife  have  been  customers  of  First  Republic  since  approxuuately 
June  2011.  Cohen  controls  several  checking  and  loan  accounts  at  First  Republic,  some  in  his  own 
name  and  others  in  the  names  of  corporate  entities.  According  to  First  Republic  s  know-your- 
customer  records  on  Cohen,'^  his  primary  physical  address  is  the  address  foi  Subject  Premises- 1. 

b.  On  or  about  October  26,  2016,  in  Manhattan,  New  York,  Cohen  opened  a  new 
checking  account  at  First  Republic  in  the  name  of  Essential  Consultants  LLC  (the  “Essential 

CTonsultants  Account’’)7  CbEeirw^the^ly^thorized  signatoiy^on  the  account.-According“to  - 

account  opening  documents,  the  primary  address  for  Essential  Consultants  LLC  was  the  address 
for  Subject  Premises-1.  When  Cohen  opened  the  Essential  Consultants  Account,  First  Republic 
Employee-1  conducted  an  in-person  interview  of  Cohen.  In  response  to  a  series  of  know-your- 
customer  questions  about  the  purpose  of  the  account  ^the  answers  to  which  First  Republic 
Employee-1  entered  into  a  form^**— Cohen  stated,  in  sum  and  substance,  that  he  was  opening 
Essential  Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting 
worlc,  and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States. 
Cohen  also  stated,  in  sum  and  substance,  that  his  purpose  in  setting  up  the  account  was  to  keep  the 
revenue  from  his  consulting  business — -which  he  said  was  not  his  main  source  of  income  separate 
from  his  personal  finances.  As  set  forth  below,  there  is  probable  cause  to  believe  that  Cohen  s 
statements  about  the  intended  purpose  of  the  account  and  source  of  funds  for  the  account  were 
false.  Specifically,  as  described  below,  the  account  was  not  intended  to  receive  ^and  does  not 


Certain  financial  institutions  are  required  to  conduct  such  procedures  pursuant  to  the  Bank 
Secrecy  Act  and  its  implementing  regulations.  See  31  U.S.C.  §  5318;  31  C.F.R.  §  1020.220. 

First  Republic  Employee-1  fu  st  filled  out  the  form  on  the  day  he  interviewed  Cohen,  October 
26,  2016.  On  or  about  December  19,  2016,  at  the  request  of  bank  compliance  personnel.  First 
Republic  Employee-1  updated  the  form  to  add  more  detail  about  Cohen’s  statements. 
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appear  to  have  received — ^money  in  connection  with  real  estate  consulting  work;  in  addition,  the 

aceount  has  received  substantial  payments  from  foreign  sources. 

c.  I  know  from  my  review  of  First  Republic  bank  records  that  were  scheduled  by  an 
FBI  forensic  accountant  that  after  Cohen  opened  the  Essential  Consultants  Account,  Cohen 
received  payments  into  that  account  fi-om  foreign  businesses  and  entities  that  do  not  reflect  the 
stated  client  profile  for  the  residential  and  commercial  real-estate  consulting  services.  Specifically, 

■fibnrmy  revreWT)f  th^  Essential  Consultants-Account-schedule  and-publiG-sourceSsncnow- the- 

following: 

i.  Beginning  on  or  about  January  31,  2017,  Cohen  began  receiving  monthly 
payments  of  $83,333  into  the  Essential  Consultants  Account  from  an  entity  called  Columbus  Nova 
EEC.  According  to  public  sources,  Columbus  Nova  is  an  investment  management  firm  controlled 
by  Renova  Group,  an  industrial  holding  company  based  in  Zurich,  Switzerland  that  is  controlled 
by  Russian  national  Viktor  Vekselberg.  From  January  2017  to  August  2017,  the  Essential 
Consultants  Account  received  seven  payments  totaling  $583,332.98  from  Columbus  Nova  EEC. 

ii.  Beginning  on  or  about  April  5,  2017,  the  Essential  Consultants  Account 
began  receiving  payments  from  Novartis  Investments,  SARE,  which  I  believe  to  be  the  in-house 
financial  subsidiary  of  the  Swiss  pharmaceutical  company  Novaifis  International  AG  (“Novartis”). 
Between  April  2017  and  February  2018,  the  Essential  Consultants  Account  received  eleven  wire 
payments  from  a  Swiss  banlc  accormt  held  in  the  name  of  Novartis,  each  in  the  amount  of  $99,980, 
for  a  total  of  $1,099,780. 

iii.  Beginning  in  or  about  April  20 1 7,  the  Essential  Consultants  Account  started 
receiving  wire  payments  from  a  banlc  account  associated  with  the  telecommunications  company 
AT&T  Inc.  (“AT&T”).  Specifically,  on  or  about  April  14,  2017,  AT&T  sent  $100,000  to  the 
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Essential  Consultants  Account  and,  from  in  or  about  June  2017  to  in  or  about  January  2018,  the 
Essential  Consultants  Account  received  ten  $50,000  payments  fi'om  AT&T.  In  total,  AT&T  sent 

$600,000  to  the  Essential  Consultants  Account. 

iv.  On  or  about  May  10,  2017,  June  9,  2017,  July  10, 2017,  and  November  27, 
2017,  the  Essential  Consultants  Account  received  four  deposits  in  the  amount  $150,000  (totaling 
$600,000)  from  a  bank  account  in  South  Korea.  The  account  holder  from  which  the  money  was 
sent  is^orea  Aerospace  Industries  Efd7“(‘lCALl”):^^  K^  Korea“based-eompany  that 

produces  and  sells  fixed-wing  aircraft,  helicopter  aircraft,  and  satellites  to  the  United  States 

Department  of  Defense,  among  other  customers. 

V.  On  or  about  May  22,  2017,  the  Essential  Consultants  Account  received  a 
$150,000  deposit  from  an  account  at  Kazkommertsbank,  a  Kazakhstani  bank.  The  listed  account 
holder  at  Khzkommertsbank  was  a  second  Kazakhstani  bank  named  BTA  Bank,  AO.  A  message 
accompanying  the  wire  payment  indicated  that  the  payment  was  a  “monthly  consulting  fee  as  per 
Inv  BTA-101  DD  May  10,  2017  consulting  agreement  W/N  DD  08  05  2017  CNTR  W/NDD 
08/05/2017.” 

vi.  In  total,  from  on  or  about  January  31, 2017  to  on  or  about  February  1, 2018, 
the  Essential  Consultants  Account  received  approximately  $3,033,112,98  in  transfers  and  checks 
from  the  aforementioned  entities.  As  of  on  or  about  J anuary  1 0, 20 1 8,  the  balance  in  the  Essential 
Consultants  Account  was  $1,369,474.23.  Cohen’s  withdrawals  from  the  Essential  Consultants 
account  reveal  that  it  was  used  for  lai-gely  personal  purposes,  including  to  pay,  among  other  things, 
American  Express  bills  and  fees  from  “the  Core  Club,”  a  private  social  club  in  New  York. 

d.  On  or  about  April  4,  2017,  Cohen  opened  another  new  checking  account  at  First 
Republic,  this  one  in  the  name  of  Michael  D.  Cohen  &  Associates,  P  .C.  (the  “MDC&A  Account  ). 
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Cohen  was  the  only  authorized  signatory  on  the  account.  According  to  account  opening 
documents,  the  primary  address  for  MDC&A  Account  was  the  addi-ess  for  Subject  Premises-1. 
Among  other  things,  the  MDC&A  Account  received  ten  wire  transfers  and  one  check  from  an 
accoxmt  in  the  name  of  Squire  Patton  Boggs,  a  law  firm.  As  noted  above,  Subject  Premises-2  is 
located  inside  the  New  York  office  of  Squire  Patton  Boggs.  In  total,  from  on  or  about  April  5, 
2017,  to  on  or  about  January  2, 2018,  the  MDC&A  Account  received  $426,097.70  in  deposits,  and 

the  balance  in  the-accounCas  ofrJanuary-272018rwas  $344754«5— As  discussed  below,-Gohen- 

never  disclosed  any  of  the  balance  in  the  Essential  Consultants  or  MDC&A  accounts  to  Sterling 
during  the  negotiations  with  respect  to  the  transaction  or  the  subsequent  loan 

refinancing  negotiations,  including  in  his  May  2017  Financial  Statement  and  September  2017 
Financial  Statement. 

19.  Based  on  my  review  of  emails  that  were  seized  pursuant  to  the  Cohen  Email 
Warrants,  and  my  review  of  reports  of  interviews  with  employees  of  AT&T  and  Novartis,  it 
appears  that  the  aforementioned  payments  to  the  Essential  Consultants  Account  and  MDC&A 
Account  were  for  political  consulting  work,  including  consulting  for  international  clients  on  issues 
pending  before  the  Trump  administration.  Specifically,  from  my  review  of  emails  from  the  Cohen 
Gmail  Account,  the  Cohen  MDCPC  Account,  and  public  sources,  I  have  learned  the  following: 

a.  On  or  about  April  28,  2017,  Cohen  sent  an  email  to  an  individual  whom  I  believe 
is  affiliated  with  KAI.  In  the  email,  Cohen  attached  a  “Consulting  Agreement”  between  KAI  and 
Essential  Consultants  dated  as  of  about  May  1,  2017.  The  agreement  indicates  that  Essential 
Consultants  had  the  address  of  Subject  Premises-2.  The  document  indicates  that  Essential 
Consultants  would  render  “consulting  and  advisoiy  services,  as  requested”  by  KAI,  and  that  KAI 
would  pay  Essential  Consultants  “a  consulting  fee  of  One  Million  Two  Hundred  Thousand 
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($1,200,000.00)  US  Dollars,”  disbursed  through  eight  $150,000  installments  between  May  2017 
and  December  2017.  I  have  also  reviewed  invoices  in  amounts  of  $150,000  that  Cohen  emailed 
to  an  individual  whom  I  believe  is  affiliated  with  ICAI.  At  the  top  of  the  invoices  the  address  listed 

for  Essential  Consultants  is  the  address  for  Subject  Premises-2. 

b.  On  or  about  May  8,  2017,  Cohen  sent  an  email  to  an  individual  whom  I  believe  is 

affiliated  with  BTA  Bank.  The  signature  block  on  Cohen’s  email  listed  “Essential  Consultants 
lXc"and^diaerD.XbHeir&  A^iatesrPC’’ and  provide^^ 

2.  In  die  email,  Cohen  attached  a  document  purporting  to  be  a  “Consulting  Agreement”  between 
BTA  Bank  and  Essential  Consultants  dated  as  of  about  May  8, 2017.  The  agreement  indicates  that 
Essential  Consultants  had  the  address  of  Subject  Premises-2.  The  document  indicates  that 
Essential  Consultants  would  render  “consulting  and  advisory  services”  to  BTA  Bank,  and  that 
BTA  Bank  would  pay  Essential  Consultants  “a  consulting  fee  of  One  Million  Eight  Hundi-ed 
Thousand  ($1,800,000.00)  US  Dollars,”  disbursed  thi'ough  monthly  payments  of  $150,000.  On  or 
about  May  10, 2017,  Cohen  sent  an  email  to  an  employee  of  BTA  Bank,  and  attached  to  the  email 
an  invoice  to  BTA  Banlc  in  the  name  of  Essential  Consultants,  with  the  address  of  Subject  Premises- 
2.  The  invoice  contemplated  a  $150,000  payment  to  Essential  Consultants  for  a  “monthly 

consulting  fee.” 

c.  On  or  about  January  23,  2017,  Cohen  appears  to  have  entered  into  a  consultmg 
agreement  with  AT&T,  which  contemplates  that  Essential  Consultants  “shall  render  consultmg  and 
advisory  services  to  [AT&T]”  and  that  AT&T  would  “advise  [Essential  Consultants]  of  those  issues 
and  matters  with  respect  to  which  AT&T  Services  desires  [Essential  Consultants]’s  assistance  and 
advice.”  The  agreement  indicates  that  Essential  Consultants  had  the  address  of  Subject  Premises- 
1.  The  contract  calls  for  AT&T  “to  pay  the  Consultant  for  his  services  ...  a  consulting  fee  of  Fifty 
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Thousand  ($50,000)  Dollars  ...  per  month.”  Based  on  my  review  of  reports  of  inteiwiews  with 
AT&T  employees,  I  have  learned  that  AT&T  retained  Cohen  to  consult  on  political  issues, 
including  net  neutrality,  the  merger  between  AT&T  and  Time  Warner,  and  tax  reform. 

d.  On  or  about  March  1,  2017,  Cohen  appears  to  have  entered  into  a  contract  between 
Novartis  and  Essential  Consultants,  which  provides  that  Essential  Consultants  will  provide 
consulting  and  advisory  services  to  Novartis  on  matters  that  relate  to  the  repeal  and  replacement  of 
Ihe^  AiMffile  Care  Acf  in  the  US-Md^anir^other  issues-mutually^  a^  (Essential— 

Consultants]  and  Novartis.”  The  contract  provides  for  a  “consulting  fee  of  One  Million  Two 
Hundred  Thousand  ($1,200,000)  US  dollars,”  to  be  paid  to  Essential  Consultants  m  equal  monthly 
installments  over  the  course  of  a  year.  Based  on  my  review  of  reports  of  interviews  with  Novartis 
employees,  I  have  learned  that  Novartis  retained  Cohen  to  provide  political  consulting  services  and 

to  gain  access  to  relevant  policymakers  in  the  Trump  Administration. 

e.  In  or  about  February  2017,  Cohen  began  negotiating  the  terms  of  a  “strategic 
alliance”  with  Squire  Patton  Boggs.  On  or  about  March  4,  2017,  Squire  Patton  Boggs  emailed 
Cohen  a  “strategic  alliance  agreement.”  Under  the  terms  of  the  agreement,  Cohen  agreed  to 
generate  business  for  the  law  fum,  and  Squire  Patton  Boggs  agreed  to  pay  to  Cohen  “an  annual 
strategic  alliance  fee  of  $500,000,  payable  in  twelve  (12)  equal  monthly  installments.”  Sqiure 
Patton  Boggs  also  agreed  to  provide  Cohen  with  “dedicated  and  segregated  office  space  in  [Squire 
Patton  Boggs’s]  New  York  and  Washington  D.C.  offices,  which  office  space  shall  be  physically 
separate  fi-om  [Squire  Patton  Boggs’s]  offices  and  have  locked  doors  and  its  own  locked  file 
cabinets.”  On  or  about  April  3,  2017,  Squire  Patton  Boggs  announced  on  its  website  that  is  had 
formed  a  “strategic  alliance”  with  Michael  D.  Cohen  &  Associates  and  would  “jointly  represent 

clients.” 
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20.  Despite  the  significant  amount  of  money  that  Cohen  received  into  the  Essential 
Consultants  Account  and  the  MDC&A  Account,  and  the  cash  balance  in  both  accounts,  Cohen  did 
not  disclose  that  information  to  Sterling  or  Melrose.  Specifically,  based  on  my  review  of  documents 
provided  by  Getzel  (as  noted  above,  Cohen’s  accountant  at  the  time),  my  participation  in  an 

my  and  ^ 

have  learned  the  following: 

- — aT“In  or  about-Ma:y  -2017rGetzel  met^with-Cohen-at  Subject-Premises=2.- At  the- 

meeting,  Cohen  told  Getzel,  in  sum  and  substance,  that  he  had  set  up  a  law  practice  called  Michael 
D.  Cohen  &  Associates  P.C.,  and  a  consulting  company  called  Essential  Consultants  LLC.  Cohen 
told  Getzel,  in  sum  and  substance,  that  he  expected  to  earn  $75,000  per  month  in  connection  with 
his  law  practice,  and  that  he  expected  gross  revenues  for  die  consulting  business  to  be  between  five 
and  six  million  dollars  annually. 

b.  In  or  about  October  2017,  if  not  earlier,  Getzel  was  preparing  a  personal  financial 
statement  for  Cohen.  On  or  about  October  6,  2017,  Getzel  sent  an  email  to  Cohen  in  which  Getzel 
wrote  that  “[a]ttached  is  a  draft  of  the  new  PFS  as  of  September  30,  2017”  and  attached  a  draft  of 
the  September  2017  Financial  Statement.  The  draft  statement  reflected  that  as  of  September  30, 
2017,  Cohen  had  only  $1,250,000  in  cash,  total  assets  of  approximately  $33,430,000  (comprised  of 
taxi  medallion  interests,  real  estate  interests,  and  his  personal  residence  and  property),  and  liabilities 
of  approximately  $45,630,000,  leaving  hhn  purportedly  over  $12  million  in  debt.  In  the  same  email, 
Getzel  questioned  Cohen,  in  sum  and  substance,  about  the  fact  that  the  financial  statement  did  not 
list  any  value  associated  with  either  the  Essential  Consultants  Account  or  the  MDC&A  Account; 
“[w]e  did  not  add  any  value  for  you[r]  two  operating  entities  -  Michael  D.  Cohen  &  Associates 
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POC  [5/c]  and  Essential  Consultants  LLC.  Please  advise  whether  or  not  these  should  be  disclosed 
and  what  value.” 

c.  On  or  about  October  6, 2017,  Cohen  called  Getzel  by  telephon^which  is  reflected 
on  toll  records  for  Cohen’s  cellphone— and  told  Getzel,  in  sum  and  substance,  not  to  include 
Essential  Consultants  or  MDC&A  in  the  September  2017  Financial  Statement  because  they  had  no 
value.  On  or  about  October  6,  2017,  following  the  call  with  Getzel,  Cohen,  using  the  Cohen 

“Amount,  responded  toiGetzePs  email  witlrthe-answer“[l]ooksgood'tome7’  Cohen  never-directed^ 

Getzel  to  make  any  changes  to  his  cash  position  as  listed  in  the  September  2017  Financial 
Statement.  In  a  letter  dated  October  6,  2017,  addressed  to  Getzel,  Cohen  stated,  “I  have  reviewed 
the  attached  statement  of  financial  condition  and  find  it  to  be  correct  and  consistent  with  the 
representations  that  I  made  to  your  firm.  The  attached  is  an  accurate  reflection  of  my  assets, 
liabilities  and  net  worth  (deficit)  as  of  September  30,  2017.”  Attached  to  that  letter  was  the 
September  2017  Financial  Statement,  which,  as  noted  above,  was  then  transmitted  to  Sterhng  m 
connection  with  the  proposed  taxi  medallion  transaction  between  Sterling,  Cohen,  and 

21 .  Based  on  my  review  of  a  report  of  an  interview  with  Sterling  Employee-1, 1  have 
learned  that  Cohen  did  not  disclose  his  income  stream  fiom  Essential  Consultants  to  Sterling 
Employee-1  or,  to  his  knowledge,  anyone  else  at  Sterling.  According  to  Sterling  Employee-1, 
knowledge  of  such  an  income  stream  would  have  affected  Sterling’s  demands  during  the 
negotiations,  particularly  with  respect  to  the  amount  of  a  principal  paydown  of  Cohen’s  debt. 

Cohen  Understated  Ffis  Available  Cash 

22.  hi  addition  to  withholding  the  existence  of  his  Essential  Consultants  income  fi-om 
Sterling  and  Melrose,  it  appeai-s  that  Cohen  also  substantially  understated  his  available  cash  and 
cash  equivalents  in  his  financial  disclosures.  Specifically,  I  know  from  my  review  of  the  September 
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2017  Financial  Statement  that  Cohen  provided  to  Sterling  that  Cohen  represented  that  he  had 
$1,250,000  in  cash  as  of  September  30,  2017.  I  also  know  that  on  or  about  January  30,  2018,  m  a 
telephone  call  with  Sterling  Employee-3,  and  on  February  1,  2018,  in  an  email  to  Sterling 
Employee-3,  Cohen  represented  that  he  did  not  have  more  than  $1,250,000  in  cash.  But,  from  my 
review  of  a  summary  of  bank  records  that  were  seheduled  by  forensic  accountants,  I  have  learned 
that  Cohen  had  approximately  $5,000,000  in  cash  and  cash  equivalents  as  of  September  30, 2017. 

Addltioirally,  as  hf  FebruaryTiT  2018,-Cohen  had  approximately  $6,000,000  in-cash-and-cas^ 

equivalents.  Specifically,  from  my  review  ofthe  account  schedule  and  bankrecords,  I  have  learned 
the  following; 

a.  Cohen  has  three  checking  and/or  savings  accounts  at  Capital  One  Bank,  one  of 
which  is  in  his  wife’s  name.  As  of  September  30,  2017,  Cohen  had  $1,105,680.35  in  his  savings 
account,  and  $1,262,982.29  in  total  in  the  three  aceounts  at  Capital  One  Banlc.  As  of  February  1, 

2018,  Cohen  had  a  total  of  $1,389,245.78  in  these  aceounts. 

b.  Cohen  has  three  accounts  at  Morgan  Stanley  in  his  name.  As  of  September  30, 
2017,  the  combined  total  in  cash  and  cash  equivalents  in  those  three  accounts  was  $1,270,600.41. 

As  of  February  1, 2018,  Cohen  had  $1,284,996.13  in  these  aceounts. 

c.  As  of  September  30, 2017,  Cohen  had  $260,689.1 8  in  an  account  at  Signatui'e  Bank. 

As  of  February  1, 2018,  Cohen  had  $261,517.55  in  this  account. 

d.  In  addition  to  the  Essential  Consultants  Account  and  MDC&A  Account  at  First 
Republic,  Cohen  also  had  two  joint  checking  accounts  with  Laura  Cohen  at  First  Republic.  In  total, 
as  of  September  30.  2017,  Cohen  had  at  least  $1,876,209.27  in  total  in  his  four  accounts  at  First 
Republic.  As  of  February  1, 2018,  Cohen  had  $3,332,992.95  in  these  accounts. 
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e.  Cohen  has  an  account  at  Bethpage  Credit  Union  with  $25,931.39  in  it  as  of 
September  30, 2017. 

f.  As  of  September  30, 2017,  Cohen  had  $17,542.54  in  accounts  at  Sterling. 

g.  Cohen  has  two  accounts  at  TD  Bank— one  in  his  name  and  one  held  jointly  with  his 
wife.  Cohen  also  has  a  safety  deposit  box  at  TD  Bank— Subject  Premises-3.  The  safety  deposit 
box  was  opened  on  December  13, 2017  in  the  names  of  Michael  and  Laura  Cohen. 

- hr"IntotalrasofSeptemberA0r20T7yGohenhadatleast$4,713v935.08inhisaGGOunts- 

at  Capital  One  Bank,  City  National  Banlc,  Signature  Bank,  Sterling  Bank,  Bethpage  Credit  Union, 
First  Republic,  and  Morgan  Stanley.  As  of  February  1,  2018,  Cohen  had  $6,268,732.59  in  his 
accounts  at  Capital  One  Bank,  City  National  Banlc,  Signature  Bank,  First  Republic,  and  Morgan 
Stanley.^^ 

23.  Accordingly,  based  on  the  foregoing,  it  appears  that  Cohen’s  written  and  oral 
representations  to  Sterling  and  Mehose  that  he  did  not  have  more  than  $1,250,000  were  false,  and 
that  Cohen  withheld  information  regarding  approximately  $5  million  in  funds  from  Sterling  and 
Melrose  in  order  to  secure  favorable  terms  in  his  renegotiation  of  his  medallion  loan.  Based  on 
my  participation  in  an  interview  with  Sterling  Empioyee-2,  and  my  review  of  reports  of  interviews 
with  Sterling  Employee-1  and  two  Mehose  employees,  it  is  my  understanding  that  that  Sterling 
and  Mehose  would  view  Cohen’s  understating  of  his  assets  as  material  to  its  decision  whether  to 
renegotiate  Cohen’s  medallion  loans  and  on  what  terms,  or  to  its  decision  whether  approve  of  the 
transfer  of  those  loans  to 

Based  on  my  review  of  the  account  schedules  described  above,  I  know  that,  as  of  the  date  of  this 
affidavit,  the  account  balances  for  TD  Banlc  have  not  yet  been  included  in  the  schedule  for  either 
date  and  the  account  balances  for  Sterling  National  Bank  and  Bethpage  Credit  Union  have  not  yet 
been  included  in  the  schedule  for  February  1,  2018.  Thus,  to  the  extent  that  these  accounts  have 
positive  balances,  Cohen’s  total  balances  in  fact  were  even  higher  on  these  dates. 
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rnhen  Has  Unreported  Interest  Income 

24.  It  appears  that  Cohen  also  hid  from  Sterling  interest  income  that  he  was  receiving  in 
connection  with  a  six  million  dollar  loan  he  made  to  another  individual.  Specifically,  I  know  from 
my  review  of  the  May  2017  Financial  Statement  and  September  2017  Financial  Statement  that 
Cohen  provided  to  Sterling  that  Cohen  did  not  disclose  that  he  had  made  a  note  receivable  in  the 
amount  of  approximately  $6  million,  or  that  he  was  earning  approximately  $60,000  per  month  m 

“inteTesfincome  in  connection  with  thaf  loan— Buf-from-my-review  of  a  sutmnary  of  bank-records 

that  were  reviewed  by  another  law  enforcement  agent,  my  review  of  property  records  and 
documents  obtained  pursuant  to  the  Cohen  Email  Warrants,  and  my  participation  in  an  interview 
with  Getzel,  I  have  learned  the  following: 

a.  Based  on  my  review  of  property  records,  I  have  learned  that  on  or  about  March  12, 

to  lend  ^^^^l^^^^^^^^^^pproximately 
$2,000,000.^°  It  appears  that  the  promissory  note  was  unsecured  by  any  real  property.  On  or  about 
April  28,  2014,  Cohen  and  amended  the  promissory  note,  and  restructured  the  loan  to 

increase  the  principal  amount  to  approximately  $5,000,000.  Under  the  terms  of  the  amended 
promissory  note,  the  loan  was  secured  by^^^^H  apartment  in  Sunny  Isles  Beach,  Florida.  On 
or  about  April  8,  2015,  Cohen  and  ^^^|restated  the  promissory  note  to  increase  the  prmcipal 

amount  to  $6,000,000.^^ 

b.  Based  on  my  review  of  a  copy  of  the  restated  note,  which  was  obtained  pursuant  to 
the  Cohen  Email  Warrants,  I  have  learned  that  under  the  teims  of  the  amended  and  restated 


I  learned  from  Getzel  that 


The  note  states  that  the  loan  is  to 
jointly  and  severally.  For  ease  of  reference,  I  refer  simply  to  “ 


husband  and  wife, 
lerem. 
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promissory  note,  Cohen’s  loan  an  interest-only  loan,  and  that  the  principal  balance 

of  the  loan  bears  interest  at  an  annual  rate  of  12.25  percent.  I  also  know  that  the  amended  and 
restated  promissory  note  includes  a  schedule  of  payments  that  require  HjUto  pay  Cohen 
approximately  $61,250  per  month  beginning  in  April  2015  and  ending  in  April  2019.  The  note  also 
requires  tlia1^^^^^|’epay  the  principal  balance  of  $6,000,000  on  April  28,  2019. 

c.  Based  on  my  review  of  banlc  records,  I  have  learned  that,  consistent  with  the  terms 

-of  the— amended— and“restated-promissory  -note;~^|^^|  has -made  monthly  payments  oT 

approximately  $61,250  since  April  2015.  Specifically,  based  on  my  review  of  records  maintained 
by  Capital  One  Bade,  I  have  learned  that  horn  April  2015  to  October  2015,  Cohen  received  checlcs 
from  an  entity  called^^^^^^^^^^^^^^^^|.  totaling  $61,250  per  month,  which  he 
deposited  into  his  personal  bade  account  at  Capital  One  Bank.^^  It  appears  horn  my  review  of  bank 
records  and  pubhc  sources  that  l^^^^|is  the  owner  of 

From  my  review  of  records  maintained  by  Capital  One  Bade,  I  have  also  learned  that  since  October 
2015,  Cohen  has  received  checks  horn  an  entity  called  i||||||||||||^^  totaling 

$61,250  per  month,  which  he  deposited  into  his  personal  bank  account  at  Capital  One  Bade.  It 
appeal's  fi'om  my  review  of  bank  records  and  public  som'ces  that  s  also  the  owner  of 

total,  it  appears  that  Cohen  receives  approximately  $735,000  per  year 

in  interest  payments  horn 

d.  Based  on  my  review  of  Cohen’s  May  2017  and  September  2017  Financial 
Statements,  my  review  of  his  20 1 5  and  20 1 6  tax  returns  obtained  via  subpoena  and  fi'om  the  Cohen 
Email  Warrants,  and  my  participation  in  an  interview  with  Getzel,  I  have  learned  that  Cohen  did 


In  April  2015,  Cohen  received  a  pro-rated  payment.  For  all  months  thereafter,  the  total  payment 
equaled  $61,250,  but^H^Hiften  made  the  payment  in  multiple  checks. 
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Ito  Sterling  or  Melrose,  or  list  it 


not  disclose  this  interest  income  he  was  receiving  from^H 
on  his  tax  returns.  I  have  also  learned  that  while  this  interest  income  is  taxable,  Cohen  did  not  tell 
Getzel-his  aeconntant-about  the  income,  and  Qetzel  only  learned  about  the  income  because  he 
began  doing  ^^^^taxes  in  2017?^ 

25.  Accordingly,  based  on  the  foregoing,  it  appears  that  Cohen’s  representations  to 

Sterling  and  Melrose  that  he  did  not  have  more  than  $1,250,000  were  false,  and  that  Cohen 

^H-in-order  to 


withheld  information  relating  to  the  interest  income  he- is  receiving  from^^^^^ 
secure  favorable  terms  in  his  renegotiation  of  his  medallion  loan. 

rotien  Had  a  Side  AgreeingntWidL^^^^^B 
26.  As  set  forth  in  detail  below,  during  the  course  of  Cohen’s  negotiations  to  sell  his 


interest  in  taxi  medallions  and  the  associated  debt  to 


Cohen  not  only 


misrepresented  his  financial  position  to  Sterling,  but  also  failed  to  disclose  a  side  agreement  he 


had  negotiated  with| 


I  it  appears  that 


|,greed  to  pay  an  above-market  price 
lipproximately 


for  Cohen’s  taxi  cab  medallions,  and  in  exchange,  Cohen  agreed  to  pay  | 

$3.8  million  in  cash.  Specifically,  from  my  review  of  documents  produced  pursuant  to  a  subpoena 
by  Sterling,  and  my  participation  in  interviews  with  Sterling  Employee-1,  Sterling  Employee-2, 
and  Sterling  Employee-3, 1  have  learned,  among  other  things,  the  following: 

a.  On  or  about  September  5, 2017,  an  executed  tenn  sheet  was  circulated  by  Sterlmg 


Employee- 1  to  Cohen  and  j 


Subject  Premises-1 .  According  to  the  teim  sheet, 

from  Sterling  and  Mehose,  to  be  secured  by  the  medallions  that 


The  term  sheet  listed  Cohen’s  address  as  the  address  for 

|vould  borrow  $20,000,000 
[was  to  acquire  from 


Accordingly,  this  interest  incomr^which  should  have  been  reported  as  sueh  on  Cohen’s  tax 
returns— is  included  herein  in  calculations  of  Cohen’ s  true  cash  position. 
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Cohen.  At  a  price  of  $20  million  for  thirty-two  taxi  medallions,  the  proposed  transaction  valued 
each  medallion  as  worth  $625,000.  The  term  sheet  also  contemplated  a  $1,265,913  pay-down  of 
the  principal  balance  of  the  loan.  The  term  sheet  made  no  mention  of  a  $3.8  million  payment  from 
Cohen  toHH^H  or  any  other  form  of  payment  or  financial  transaction  between  the  parties. 

b.  Additionally,  an  internal  Sterling  credit  memorandum,  dated  October  4,  2017, 
describing  the  terms  of  the  Cohen-^^^Btransaction  and  the  new  loan  to 
Ifdt  iSefrfidirW^pdpienrs  frmn  Cohem 

memorandum  also  noted  that  the  “loan  amount  of  $20MM  indicates  a  $625M  purchase  price  per 
medallion”  but  “it  is  recognized  that  this  is  not  in  line  with  current  mai'ket  values.”  Indeed, 
according  to  an  internal  Sterling  memorandum  dated  February  5,  2018,  in  the  month  of  January 
2018,  taxi  medallions  sold  for  amounts  ranging  from  $120,000  to  $372,000.  According  to  Sterling 
Employee-1  and  Sterling  Employee-2,  they  were  never  told  that  ^^^frgreed  to  a  purchase 
price  of  $625,000  in  exchange  for  a  lump  sum  payment  from  Cohen,  or  that  Cohen  would  make 

any  payment  to  "H|||||m 

c.  On  or  about  January  30,  2018,  Sterling  Employee-3  asked  Cohen  whether  Cohen 
had  a  side  agreement  with  ^^H^o  pay  sum  of  money  for  entering  into  the 

medallion  transaction.  Sterling  Employee-3  asked  Cohen  about  such  an  arrangement  because, 
according  to  Sterling  Employee-3,  the  price  that  |^^|was  paying  for  each  medallion 
appeared  to  be  well  above  the  market  price.  Cohen  stated,  in  sum  and  substance,  that  he  had  no 

side  agreement — and  never  had  a  side  agreement  with||^^|^^^| 

27.  While  Cohen  and^^^^fl  did  not  disclose  any  payment  from  Cohen  to 
^^^^in  communications  with  Sterling,  it  appears  that  such  a  payment  was  contemplated. 
Indeed,  based  on  my  review  of  records  maintained  by  Getzel,  and  my  participation  in  an  interview 
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with  Getzel,  I  have  learned  the  following,  in  substance  and  in  part,  regarding  the  proposed  side 
payment  from  Cohen  toimilllllB 

a.  On  or  about  September  19,  2017,  Getzel  prepared  a  memorandum  for  Cohen 
entitled,  “Sale  of  NYC  Medallion  Entities  and  Debt  Assumption”  (the  “Getzel  Memorandum”). 
The  Getzel  Memorandum  summarized  the  proposed  transaction  between  Cohen  and 
in  part,  as  follows;  “Michael  and  Laura  Cohen  will  transfer  ownership  of  their  13  NYC  medallion 

"enMestoaBuyer  whb  will^ssumElheif  bank^^^ 

debt  portfolio  of  the  1 3  entities  by  $500,000  and  a  cash  payment  to  the  Buyer  of  $3, 800,000. 

b.  According  to  Getzel,  Cohen  told  him  the  parameters  of  the  deal,  including  the 


payment  of  $3,800,000  to 


but  Getzel  did  not  loiow  where  Cohen  was  going  to  obtain 


$3,800,000  to  pay 
cash  equivalents  as 


As  noted  above,  Cohen  had  more  than  $5,000,000  in  cash  and 
of  September  2017,  but  had  only  disclosed  in  his  September  2017  Financial 


Statement  that  he  had  $1 .25  million  in  cash. 

28.  Based  on  my  review  of  records  maintained  by  Sterling  (as  well  as  Melrose,  the  bank 

with  the  participating  interest  in  the  loans)  and  reports  of  interviews  of  repmsentatives  of  Sterling 

(and  Mefrose),  I  have  seen  no 
involved  in  the  potential  deal  with  Cohen  and  | 

side  payment  from  Cohen 

The  Illegal  Campaign  Contribution  Scheme 

29.  The  USAO  and  FBI  are  also  investigating  a  criminal  violation  of  campaign  finance 

laws  by  Michael  Cohen.  As  set  forth  below,  there  is  probable  cause  to  believe  that  Cohen  made 


evidence  that  Sterling,  Melrose,  or  any  other  financial  institution 

livas  aware  of  the  planned  $3.8  million 


24  lEe  reference  to  thirteen  medallions  appears  to  be  an  error  by  Geteel.  Cohen  and  his  wife 
together  owned  sixteen  corporations,  which  in  turn  owned  32  taxi  medallions. 
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an  excessive  in-kind  contribution  to  the  presidential  election  campaign  of  then-candidate  Donald 
Trump  in  the  form  of  a  $130,000  payment  to  Stephanie  Clifford,  an  individual  who  was  rumored 
to  have  had  an  extramarital  affair  with  Trump,  in  exchange  for  her  agreement  not  to  disclose  that 
alleged  affair.  As  set  forth  below,  there  is  probable  cause  to  believe  that  this  payment  was  intended 
to  keep  Clifford  from  maldng  public  statements  about  the  rumored  affair  on  the  eve  of  the  2016 
presidential  election,  and  thus  constitutes  a  campaign  contribution  in  excess  of  the  applicable  limit. 
20]  From  my  review^bf  public  sour^S7Thave  learhedThe  following; 

a.  In  or  around  October  2011,  there  were  rumors  published  on  the  gossip  websites 
TheDirty.com  that  Trump  had  had  an  extramarital  affair  with  Clifford,  an  adult  film  acfress  whose 
screen  name  is  Stormy  Daniels,  in  or  around  July  2006.  In  or  about  October  2011,  Life  &  Style 
Magazine,  a  tabloid  sold  in  supermarkets,  also  published  an  article,  based  on  the  report  in 
TheDirty.com,  alleging  an  affair  had  occuiTed  between  Trump  and  Clifford.  Both  Trump  and 
Clifford,  through  then  representatives,  issued  denials  in  response  to  the  articles. 

b.  Specifically,  on  or  about  October  11, 2011,  Keith  Davidson,  who  identified  himself 
as  Clifford’s  attorney,  sent  a  cease  and  desist  letter  to  TheDirty.com,  demanding  that  the  article 
regarding  Trump  and  Clifford  be  removed  fi-om  the  website.  Additionally,  on  or  about  October 
12,  2011,  Cohen,  who  was  then  Executive  Vice-President  and  Special  Counsel  to  the  Trump 
Organization,  stated  to  E!  News  that  “[t]he  totally  untrue  and  ridiculous  story  . . .  emanated  from 

a  sleazy  and  disgusting  website. . .  .The  Tiump  Organization  and  Donald  J.  Trump  will  be  bringing 

a  lawsuit .  .  .  [and]  Mr.  Trump  and  die  Trump  Oi'ganization  would  like  to  thank  and  commend 

Stormy  Daniels  and  her  attorneys  for  then  honesty  and  swift  actions.  ’ 

31.  On  or  about  June  16,  2015,  Trump  formally  launched  his  2016  presidential 
campaign.  On  or  about  May  4,  2016,  Trump  became  the  presumptive  Republican  Party  nominee 
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for  president,  and  on  Wy  19.  2016,  Trump  officially  became  the  nominee.  Based  on  my  review 
of  public  sources,  I  have  learned  that  while  it  does  not  appear  that  Cohen  had  an  official  title  as 
part  of  the  Trump  campaign,  on  multiple  occasions  Cohen  made  public  statements  on  behalf  of 
Trump  or  his  campaign.  For  instance,  on  or  about  August  18, 2016,  Cohen  appeared  on  CNN  to 
defend  Trump’s  polling  numbers. 

32.  On  or  about  October  7,  2016,  The  Washington  Post  published  online  a  video  and 

■^^panying  audio  in  which  TTiibp“rbfeffed-t6rw6me^ 
terms”  in  a  2005  conversation  with  Billy  Bush,  who  was  then  the  host  of  Access  Hollywood.  The 
following  day,  on  October  8,  2016,  Trump  appeared  in  a  video  in  which  he  stated,  among  othei 
things,  “I’ve  said  and  done  things  I  regi-et  and  words  released  today  on  this  more  than  a  decade  old 
video  are  one  of  them.  Anyone  who  knows  me  loiows  these  words  don’t  reflect  who  I  am.  I  said 
it.  I  was  wrong  and  I  apologize.”  Based  on  my  review  of  public  sources,  I  also  know  that 
representatives  of  the  Trump  Campaign  stated,  in  sum  and  substance,  that  the  Access  Hollywood 
comment  was  an  old  and  isolated  incident. 

33.  Based  on  my  review  of  public  sources,  including  an  article  published  in  Stale 
by  a  reporter  who  interviewed  Clifford,  I  have  learned  that  around  this  same  time,  in  or 
about  October  2016,  Clifford  was  in  discussions  with  ABC’s  Good  Morning  America  show  and 
Slate  magazine,  among  other  media  sources,  to  provide  these  media  outlets  with  her  statement 
about  her  alleged  lelaHonship  with  Trump.  According  to  the  article  in  Slate,  which  the  author 
based  on  conversations  with  Clifford  over  the  telephone  and  by  text  message,  Clifford  wanted  to 
be  paid  for  her  story  or  be  paid  by  Trump  not  to  disclose  her  accusation.  As  Cohen  summarized 
in  a  201 8  email  obtained  pursuant  to  the  Cohen  Email  Warrants!  “In  October  2016, 1  was  contacted 
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by  counsel  for  Ms.  Clifford  stating  that  news  outlets,  including  ABC  News,  were  pursuing  the  20 1 1 
story  of  an  alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.” 

34.  From  my  review  of  telephone  toll  records^^  and  information  produced  pursuant  to 
the  iCloud  Warrant  and  Cohen  Email  Warrants,  I  have  learned  that  in  the  days  following  the  Access 
Hollywood  video,  Cohen  exchanged  a  series  of  calls,  text  messages,  and  emails  with  Keith 
Davidson,  who  was  then  Clifford’s  attorney,  David  Pecker  and  Dylan  Howard  of  American  Media, 

Incr(“AMI’’)7tltrpublisher  of  the  iVaho«£3[/”EngM/re7-^^  Trumprand  Hope  Hicksrwho-was  then- 

press  secretary  for  Trump’s  presidential  campaign.  Based  on  the  tuning  of  these  calls,  and  the 
content  of  the  text  messages  and  emails,  I  believe  that  at  least  some  of  these  communications 
concerned  the  need  to  prevent  Clifford  fi-om  going  public,  particularly  in  the  wake  of  the  Access 
Hollywood  story.  In  particular,  I  have  learned  the  following; 

a.  On  October  8, 20 1 6,  at  approximately  7:20  p.m.,  Cohen  received  a  call  from  Hicks. 
Sixteen  seconds  into  the  call.  Trump  joined  the  call,  and  the  call  continued  for  over  four  minutes. 
Based  on  the  toll  records  that  the  USAO  has  obtained  to  date,  I  believe  that  this  was  the  first  call 


My  attribution  of  certain  telephone  numbers  to  certain  individuals  as  described  in  this 
atfidavit  is  based  on  my  review  of  the  vCard  (virtual  contact  file)  and  text  messages  obtained  from 
Cohen’s  telephone  pursuant  to  the  iCloud  Warrant. 

Pecker  is  President  of  AMI  and,  according  to  his  own  statements  in  public  reports,  a  personal 
friend  of  Trump.  Howard  is  the  chief  content  officer  of  AMI,  who  according  to  public  records 
reports  directly  to  Pecker. 

I  believe  that  Tramp  joined  the  call  between  Cohen  and  Hicks  based  on  my  review  of  toll 
records.  Specifically,  I  know  that  a  call  was  initiated  between  Cohen’s  telephone  number  and 
Trump’s  telephone  number  at  the  same  time  the  records  indicate  that  Cohen  was  talldng  to  Hicks. 
After  the  Cohen-Trump  call  was  initiated,  it  lasted  the  same  period  of  time  as  the  Cohen-Hicks 
call.  Additionally,  the  toll  records  indicate  a  “-1”  and  then  Trump’s  telephone  number,  which, 
based  on  my  training  and  experience,  means  that  the  call  was  either  transferred  to  Trump,  or  that 
Trump  was  added  to  the  call  as  a  conference  or  three-way  call  participant.  In  addition,  based  on 
my  conversations  with  an  FBI  agent  who  has  interviewed  Hicks,  I  have  learned  that  Hicks  stated, 
in  substance,  that  to  the  best  of  her  recollection,  she  did  not  learn  about  the  allegations  made  by 
Clifford  until  early  November  2016.  Hicks  was  not  specifically  asked  about  this  three-way  call. 
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Cohen  had  received  or  made  to  Hicks  in  at  least  multiple  weeks,  and  that  Cohen  and  Trump  spoke 
about  once  a  month  prior  to  this  date  -  specifically,  prior  to  this  call  on  October  8,  2016,  Cohen 
and  Trump  had  spoken  once  in  May,  once  in  June,  once  in  July,  zero  times  in  August,  and  twice 

in  September. 

b.  Approximately  ten  minutes  after  the  call  ended,  Hicks  and  Cohen  spoke  agam  for 
about  two  minutes. 

- - ^,7-AT7:19T:m-immediately-afier  the-second  call  with  Hicks-end^^^^^ 

David  Pecker  (as  noted  above,  the  President  of  American  Media  Inc.,  or  AMI)  and  they  connected 
for  thu-ty  seconds.  Approximately  four  minutes  later,  Cohen  called  Pecker  again  and  they  spoke 
for  more  than  a  minute.  Three  minutes  after  ending  his  call  with  Pecker,  Cohen  received  a  call 
from  Dylan  Howai-d  (as  noted  above,  the  Chief  Content  Officer  of  AMI),  and  they  spoke  for 
approximately  a  minute.  According  to  toll  records,  it  does  not  appear  that  Cohen  and  Howard 
spoke  regulai-ly  prior  to  October  8,  2016,  as  it  had  been  over  a  month  since  they  had  called  each 

other. 

d.  At  7:56  p.m.,  approximately  eight  mmates  after  his  call  with  Howard  ended,  Cohen 
called  Hicks  and  they  connected  for  two  minutes.  At  approximately  the  same  time  this  call  ended, 
Cohen  received  a  call  from  Pecker,  and  they  spoke  for  about  two  minutes.  At  8:03  p.m.,  about 
fcee  minutes  after  ending  his  call  with  Pecker,  Cohen  called  Trump,  and  they  spoke  for  nearly 

eight  minutes. 

e.  At  8:39  p.m.  and  8:57  p.m.,  Cohen  received  calls  from  Howard  and  spoke  to  hnn 
for  about  four  and  six  minutes,  respectively.  At  9:13  p.m.,  about  ten  minutes  after  Cohen  and 
Howani  hung  up  fiom  the  second  of  these  calls,  Howard  sent  Cohen  a  text  message  that  said: 
“Keitli  will  do  it.  Let’s  reconvene  tomorrow.”  Based  on  my  involvement  in  this  invesUgation,  I 
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believe  that  when  Howard  wrote  “Keith,”  he  was  referring  to  Keith  Davidson,  the  attorney  for 
Stephanie  Clifford.  At  3:31  a.m.,  now  on  October  9, 2016,  Cohen  sent  Howard  a  text  message  in 
response  that  said:  “Ihankyou.”  Eight  minutes  later,  Cohen  sent  Howard  atext  message  that  said: 
“Resolution  Consultants  LLC.  is  the  name  of  the  entity  I  foitned  a  week  ago.  Whenever  you  wake, 

please  call  my  cell.” 

f.  The  following  day,  on  October  10, 2016,  at  10:58  a.m,  Howard  sent  a  text  message 

lo^&hiir^id^5®iom«6h-sWdr“KeithMichael:-connecting-y^^^^^ 

business  opportunity.  Spoke  to  the  client  this  AM  and  they’re  confirmed  to  proceed  with  the 
opportunity.  Thanks.  Dylan.  Over  to  you  two.”  At  12:25  p.m.,  Davidson  sent  Cohen  a  text  message 
that  stated:  “Michael  -  it  we  are  ever  going  to  close  this  deal  -  In  my  opinion,  it  needs  to  be  today. 
Keith.”  Davidson  and  Cohen  then  spoke  by  phone  for  about  three  minutes.  Based  on  my 
participation  in  this  investigation,  I  believe  that  when  Howard  wrote  that  the  “elient”  was 
“confirmed  to  proceed  with  the  opportunity,”  he  was  referring  to  Clifford’s  agreement  m  principle 
to  accept  money  from  Cohen  in  exchange  for  her  agreement  not  to  discuss  any  prior  affiiir  with 

then-candidate  Trump?'^ 

g.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
know  that  on  or  about  October  10, 201 6,  Clifford  and  Davidson  appear  to  have  signed  a  “side  letter 
agreement”  that  stated  it  was  an  exhibit  to  a  “confidential  settlement  agreement  and  mutual 
release”  between  “Peggy  Peterson”  and  “David  Dennison.”  The  purpose  of  the  document. 


2S  A,  set  forth  below  AMI  was  also  involved  in  a  payment  to  model  Karen  McDougal. 

HoweveUecS^the—unicationswereincloserempo^ 

the  negotiation  of  a  payment  to  CUfford,  the  execution  of  the  agreement  ™  . 

° ,  r-  j  piiffnrrl  T  helievc  that  these  comixiunications  weie  related  to  Clifior  . 

by  McDougal,  I  have  l^ed  tta.  she 

Ctiared  m  Seement  with  AMI  several  months  prior  to  there  communications  between  Cohen 

and  Pecker,  Howard,  and  Davidson. 
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accordmg  to  the  agreement,  waa  to  defme  the  “true  name  and  identity"  of  persons  named  by 
pseudonym  in  “confidential  settlement  agreement  and  mutual  release.”  The  side  letter  agreement 
specifies  the  identity  of  Teggy  Peterson”  to  be  Clifford,  but  the  space  for  “Dennison’s”  identity 
is  blank.  The  agreement  also  includes  a  signature  page  for  “Peterson,”  “Dennison,”  and  their 
attorneys.  The  signature  page  is  signed  by  “Peterson”  and  his  attorney,  Davidson,  but  the 
document  is  unsigned  by  “Dennison”  and  his  attorney.  Based  on  my  involvement  in  this 

lnt^gation,lbehewilgDavidsbTrsenteohen-this-partially-signed^ide4etter-agreement^ 

Older  to  facilitate  the  closing  of  a  deal  between  Davidson’s  client  and  Cohen  or  his  client  on 

October  10,  2016. 

35.  It  appears  that  on  October  13,  2016,  and  the  days  that  followed,  Cohen  took  steps 
m  complete  a  transaction  with  Davidson,  including  attempting  to  open  an  account  Som  which 
Cohen  could  transfer  funds  to  Davidson.  Speeiflcally,  6om  my  review  of  toll  records,  information 
obtained  pursuant  to  the  iCloud  Warrant  and  Cohen  Email  Warrants,  records  maintained  by  First 
RepnbUc,  as  well  as  my  paiticipaaon  in  interviews  with  First  Republic  employees,  I  have  learned 

the  following; 

a.  On  the  morning  of  October  13, 2016,  at  8:54  a.m,  Cohen  sent  Pecker  atextmessage 
that  stated:  “I  need  to  talk  to  you.”  At  9:06  a.m..  Pecker  sent  a  text  message  to  Cohen  that  stated, 
“I  called  please  call  me  back.”  The  tolls  between  Cohen  and  Pecker  do  not  show  a  telephone  call 
between  8:54  am.  and  9:06  a.m.  However,  based  on  my  review  of  text  messages,  I  have  learned 
that  Cohen  and  Pecker  communicate  with  each  other  over  Signal,  which  is  an  enciypted 
communications  cellphone  application  that  allows  users  to  send  encrypted  text  messages  and  make 

encrypted  calls. 
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b.  At  9:23  a.m.,  Cohen  sent  an  email  that  stated  “call  me”  to  First  Republic  Employee- 
2.  The  email  attached  documents  from  the  Seeretaiy  of  State  of  Delaware  indicating  that  Cohen 
had  formed  a  limited  liability  company  called  “Resolution  Consultants  LLC  on  September  30, 
2016.  As  noted  above,  “Resolution  Consultants”  is  the  name  of  the  entity  that  Cohen  had  told 
Howard  he  had  formed  recently  after  Howard  said  Davidson  would  “do  it.”  At  10:44  a.m.,  Cohen 
called  First  Republic  Employee-2  and  told  him,  in  sum  and  substance,  that  he  needed  an  account 
lnfrirnameof“ResdhrtioiCOT^ltahts’’T)pnedimme^^^^ 
on  the  checks  written  out  of  the  account.  Later  that  day,  another  employee  at  First  Republic 
emailed  Cohen  account  opening  paperwork  to  complete.  Cohen  returned  the  account  opening 
documents  partially  completed,  hut  failed  to  provide  a  copy  of  his  driver’s  license  or  passport,  and 
did  not  respond  to  the  employee’s  question  of  how  he  wanted  to  fimd  the  account.  As  a  result,  the 

account  was  never  opened. 

c.  On  October  1 7,  20 1 6,  Cohen  incorporated  Essential  Consultants  LLC  in  Delaware. 

That  same  day,  he  filed  paperwork  to  dissolve  Resolution  Consultants  LLC. 

36.  Despite  these  steps  taken  hy  Cohen,  it  appears  that  the  negotiation  between  Cohen 
and  Davidson  was  not  progressing  sufficiently  fast  enough  for  Davidson  or  his  client,  CUfford, 
and  they  thi'eatened  to  go  public  with  Clifford’s  allegations  just  days  before  the  presidential 
election.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the 

iCloud  Warrant,  and  public  sources,  I  know  the  following: 

a.  According  to  an  article  in  The  Washington  Post,  which  quoted  emails  sent  from 
Cohen’s  email  aecount  hosted  by  the  Trump  Organization,  on  October  17, 2016,  Davidson  emailed 
Cohen  and  threatened  to  cancel  the  aforementioned  “settlement  agreement”  by  the  end  of  the  day 
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if  Cohen  did  not  complete  the  transaction.^®  According  to  the  article,  Davidson  sent  Cohen  a 
second  email  later  in  the  day  that  stated  in  part,  “Please  be  advised  that  my  client  deems  her 
settlement  agreement  canceled  and  void.”  At  4:00  p.m.  that  day,  Cohen  called  Davidson  and  they 
spoke  for  over  five  minutes. 

b.  Cohen’s  4:00  p.m.  call  with  Davidson  and/or  Davidson’s  threats  to  cancel  the 
“settlement  agreemenf  ’  appeal-  to  have  touched  off  a  flurry  of  communications  about  the  settlement 
agreement  and  whether  Clifford  would  go  public.  Specifically. 

i.  At  4:43  p.m.,  Howai'd  sent  Cohen  a  text  message  that  stated:  “I’m  told 
they’re  going  with  DailyMail.  Are  you  aware?”  One  minute  later,  Cohen  responded.  Call  me. 
Based  on  my  involvement  in  this  investigation,  I  understand  Howard’s  text  to  mean  that  he  heard 
that  Clifford  was  going  to  take  her  story  of  an  extramarital  affair  with  Trump  to  the  Daily  Mail,  a 
tabloid  newspaper. 

ii.  At  4:45  p.m.,  Howard  called  Cohen  and  they  spoke  for  over  two  minutes. 

Moments  later,  Davidson  and  Cohen  spoke  for  about  two  minutes. 

iii.  At  5:03  p.m.,  Cohen  attempted  to  call  Trump,  but  the  call  only  lasted  eight 

seconds.  This  was  Cohen’s  first  call  after  he  spoke  with  Davidson. 

iv.  At  5:25  p.m.,  Cohen  texted  Howard,  stating:  “Well???” 

V.  At  6:44  p.m.,  Howard  responded  to  Cohen’s  text,  stating:  “Not  taking  my 

calls.”  Cohen  responded  one  minute  later:  “You’re  Iddding.  Who  are  you  trying  to  reach?” 
Howard  responded  one  minute  later:  “The  ‘agent.’”  Based  on  my  involvement  in  this 


Due  to  the  partially  covert  nature  of  the  investigation  to  this  date,  the  USAO  has  not  requested 
documents  from  the  Trump  Organization  or  Davidson,  and  thus  does  not  possess  the  email 
referenced  in  this  article. 
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investigation,  I  understand  Howard’ s  text  messages  to  mean  that  lie  attempted  to  contact  Davidson 
about  the  matter  involving  Clifford,  but  that  Davidson  was  not  taking  Howard’s  calls. 

vi.  At  6:49  p.m.,  Cohen  called  Howard  and  they  spoke  for  nearly  four  minutes, 

c.  The  following  day,  on  October  18,  2016,  TheSmokmgGun.com,  a  website  that 
publishes  legal  documents  and  mugshots,  published  an  article  called:  “Donald  Trump  and  the  Pom 
Superstar,”  which  alleged  that  Trump  had  an  extramarital  affair  with  Clifford.  However,  the 

article  noted  that  Clifford  had  declined  to  comment. 

37.  On  or  about  October  25,  2016,  the  communications  between  Cohen,  Davidson, 

Howard  and  Pecker  picked  up  again,  apparently  concerning  a  transaction  mvolving  Clifford. 
Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen  Email 
Warrants  and  iCloud  Warrant,  as  well  as  my  review  of  public  sources,  I  have  learned  the  followmg: 

a.  On  October  25,  2016,  at  6:09  p.m.,  Howard  sent  Cohen  a  text  message  statmg: 
“Keith  calling  you  urgently.  We  have  to  coordinate  something  on  the  matter  he’s  ealling  you  about 
or  its  [sic]  could  look  awfully  bad  for  everyone.”  One  minute  later,  Davidson  sent  Cohen  a  text 
message  stating  “Call  me.”  Cohen  and  Davidson  called  each  other  several  times  over  the  next  half 
hour  but  appear  not  to  have  connected.  At  6:42  p.m.,  Cohen  and  Davidson  spoke  for  about  eight 

minutes.  At  7:11  p.m.,  they  spoke  for  another  two  minutes. 

b.  The  next  morning,  on  or  about  October  26, 2016,  at  8:26  a.m.,  Cohen  called  Trump 
and  spoke  to  him  for  approximately  three  minutes.  At  8:34  a.m.,  Cohen  called  Tmmp  agam  and 
connected  for  a  minute  and  a  half 

c.  At  approximately  9:04  a.m.— less  than  thirty  minutes  after  speaking  with  Tmmp— 
Cohen  sent  two  emails  to  the  person  who  had  incorporated  Resolution  Consultants  and  Essential 
Consultants  for  him,  and  stated  “can  you  send  me  asap  the  filing  receipf  ’  and  then,  in  the  second 
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email,  “for  Essential  Consultants  LLC  ”  Hiat  person  responded  with  the  filing  receipt  two  murates 
later  at  9:06  a.m.  and  with  the  certification  of  formation  23  minutes  later,  at  9:27  a.m. 

d.  Shortly  after  that,  Cohen  contacted  First  Republic  Employee-2  and  told  him,  in  sum 
and  substance,  thathe  decided  no,  to  open  an  account  in  dre  name  of“Re^lution  Consulting”  and 
instead  would  be  opening  a  real  estate  consulting  company  in  tire  name  of  “Essential  Consultants.” 
Cohen  told  First  Republic  Employee-2  that  he  was  at  Trump  Tower,  and  wanted  to  go  to 
■^Uc  bnurch  across  tire  sfteTt  to-^pen-ite 

Republic  Employee-1,  a  preferred  banker  at  that  branch,  assist  Cohen.  At  11:00  a.m..  First 


Republic  Employee-1  called  Cohen.  I  know  fi-om  my  participation  in  an  mtervrew  wrth  Fust 

RepubUeEmployee-l.ttrataroundthetimeofthecallhewenttoCohen'sofficeinTrumpTower- 

on  the  same  floor  as  the  Trump  Organization-and  went  through  aeeoun,  opening  questions, 
including  know  your  customer  questions,  with  Cohen.  In  response  to  a  series  of  know-your- 
customer  questiorrs  about  the  purpose  of  the  account-the  answers  to  which  First  Republic 
Employee-1  entered  into  a  form-^ohen  stated,  in  sum  and  substance,  that  he  was  opening 


Essential  Consultants  as  a  real  eshrte  consulting  company  to  collect  fees  for  inveshnen,  consulting 
work,  and  all  of  his  consulting  cUents  would  be  domestic  individuals  based  in  the  United  Stales. 
Based  on  my  review  of  records  obtained  firrm  First  Repubiic,  it  appears  that  this  account  (the 
“Essential  Consultants  Aecount”)  was  created  at  a  time  between  1 1 :00  a.m.  and  1 :00  p.m. 

e.  At  1:47  p  m.,  Cohen  called  Davidson  and  they  spoke  for  approximately  two 


minutes.  At  approximately  1 :49  p.m.,  Davidson  emailed  Cohen  wiring  instructions  for  an  attomey 
client  trust  account  at  City  National  Bank. 

f.  After  the  Essential  Consultants  Account  was  opened  on  October  26,  2016,  Cohen 
uansfetred  $131,000  from  a  home  equiR:  line  of  credit  that  Cohen  had  at  First  Republie  m  the 
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Essential  Consultants  Account.  Following  the  transfer,  at  approximately  4:15  p.m.  on  October  26, 
2016,  First  Republic  Employee-2’s  assistant  emailed  Cohen  at  his  Trump  Organization  email 
address  to  tell  him  that  the  &nds  had  been  deposited  into  the  Essential  Consultants  Account. 
Cohen  forwarded  that  email  to  the  Cohen  Gmail  Account  and  then  forwarded  it  to  Davidson, 

g.  At  6:37  p.m.,  Cohen  asked  Pecker  by  text  message,  “Can  we  speak?  Important.” 
Cohen  called  Pecker  at  6:49  p.m.  and  connected  for  thirty  seconds.  At  6:57  p.m.,  Cohen  sent 

IfoW  a  text  message,  stating:  ‘Tlea^calllne;  !^^ 
and  connected  for  about  thirty  seconds.  At  7:06  p.m.,  Cohen  called  Pecker  again  and  they  spoke 
for  nearly  thirteen  minutes.  At  7:24  p.m.,  Howard  sent  a  text  message  to  Cohen  that:  “He  said 
he’d  call  me  back  in  20  minutes.  I  told  him  what  you  are  asking  for  his  [sic]  reasonable.  I’ll  get 
it  sorted.”  Approximately  an  hour  later,  at  8:23  p.m.,  Howard  told  Cohen  by  text  message  to 
“check  your  Gmail  for  email  from  my  private  account.”  In  an  email  sent  at  8:23  p.m.  by  Howard 
to  Cohen  and  Davidson,  with  the  subject  line  “Confirmation,”  Howard  stated,  “Thanlc  you  both 
for  chatting  with  me  earlier.  Confirming  agreement  on:  -  Executed  agreement,  hand-signed  by 
Keith’s  client  and  returned  via  overnight  or  same-day  FedEx  to  Michael,  -  Change  of  agreement 
to  reflect  the  correct  LLC,  -  Transfer  of  funds  on  Thursday  AM  to  be  held  in  escrow  until  receipt 
of  agreement.”  After  receiving  that  email,  at  approximately  8:27  p.m.,  Cohen  asked  Howard  by 
text  message,  “Can  you  and  David  [Pecker]  give  me  a  call.”  Howard  promptly  responded:  “David 
is  not  around  I  think.  I’ll  call.”  At  8:28  p.m.,  Howard  called  Cohen  and  they  spoke  for  three 

minutes. 

38.  On  October  27,  2016,  Cohen  made  a  payment  to  Davidson  of  $130,000— with  the 
funds  intended  for  Clifford— for  the  purpose  of  securing  her  ongoing  silence  with  respect  to  the 
allegations  that  she  had  an  extramarital  affair  with  Trump.  Specifically,  based  on  my  review  of 
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toll  records,  battle  records,  and  informatiott  obtained  pursuant  to  the  iCloud  Warrant  and  Cohen 

Email  Warrants,  I  have  learned  the  following: 

a.  At  9:47  a.m.,  Cohen  sent  Davidson  an  email,  stating;  “Keith,  kindly  confirm  that 

the  wire  received  today,  October  27,  2016  shall  be  held  by  you  in  your  attorney’s  trust  account 
until  such  time  as  directed  for  release  by  me,  in  writing.  Additionally,  please  ensure  that  all 
papei-work  contains  the  correct  name  of  Essential  Consultants  EEC.  I  thank  you  in  advance  for 

your  assistance  and  look  forward  to  hearing  from  you  later.” 

b.  At  approximately  10:01  a.m.,  according  to  records  provided  by  First  Republic 

Bank,  Cohen  completed  paperwork  to  wire  $130,000  from  the  Essential  Consultants  Account- 
whichhad  been  fiinded  a  day  prior  from  Cohen’s  home  equity  line  of  credit-to  the  attorney  client 
trust  account  at  City  National  Bank  that  Davidson  had  specified  in  the  wiring  instructions  he  sent 

to  Cohen.  The  wire  transfer  was  made  shortly  thereafter. 

c.  At  10:02  a.m.,  Davidson  responded  to  Cohen’s  email  from  9.47  a.m.,  stating.  I 

confirm  that  I  will  work  in  good  faith  &  that  no  funds  shall  be  disbursed  unless  &  until  the  plaintiff 
personally  signs  all  necessary  settlement  paperwork,  (the  form  of  which  will  match  the  prior 
agreement).  The  settlement  docs  will  name  the  correct  corporation,  (Essential  Consultants  EEC). 
Plaintiff’s  signature  will  be  notarized  and  returned  to  you  via  FedEx.  Only  after  you  receive  FedEx 

will  I  disburse.  Fair?” 

d.  At  10:50  a.m.,  First  Republic  Employee-1  sent  Cohen  an  email  confirming  that  the 

payment  had  been  sent  and  providing  him  with  the  wire  number. 

39.  On  October  28,  2016,  and  the  days  that  followed,  Cohen  finalized  the  transaction 

with  Davidson.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant 
to  the  iCloud  Warrant,  public  sources,  and  banlc  records,  I  know  the  followmg: 
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a.  On  October  28, 2016,  at  11:48  a.m.,  Cohen  spoke  to  Trump  for  approxnnately  five 
minutes.  Beginning  at  1:21  p.m.,  Cohen  attempted  a  series  of  phone  calls  to  Davidson,  Pecker, 
and  Howai-d  throughout  the  day,  although  it  appears  he  may  only  have  connected  with  Howard. 

b.  Later  that  day,  at  approximately  7:01  p.m.,  Davidson  stated  to  Cohen  by  text 
message  that  “all  is  AOK.  I  should  have  signed,  notarized  docs  on  Monday.  You  should  have 
them  on  Tuesday.”  Cohen  thanlced  him  and  said  “I  hope  we  are  good.”  Davidson  responded,  “I 
^sure  you.  We  are^vei^good.”  Howard  arso  t^tedCdh^^  7^08  p:hf7“KeittEDavids^^^^^^ 

we  are  good.”  Cohen  then  responded  “OK”  to  Howard  and  “Excellent”  to  Davidson.  At 

approximately  10:30  p.m.,  Cohen  spoke  to  Hicks  for  three  mmutes. 

c.  On  October  31,  2016,  Cohen  called  Howard  at  8:22  p.m.  and  they  spoke  for  over 
three  minutes.  At  8:32  p.m.,  Cohen  received  text  messages  from  both  Howard  and  Davidson. 
Howard  said:  “You’ll  have  paperwork  tomorrow  says  KD.”  Davidson  said:  “We  are  AOK.  You 
will  be  receiving  a  package  tomorrow.”  Cohen  responded  “Thank  you”  to  Howard  and  ‘Thanks 
Keith.  Will  call  you  then”  to  Davidson.  From  my  involvement  in  this  investigation,  I  believe 
Davidson  was  refen-ing  to  a  signed  nondisclosm-e  agreement  when  he  told  Cohen  that  he  would 

receive  a  package. 

d.  Based  on  my  review  of  court  filings  that  became  public  in  201 8, 1  have  learned  that 
on  or  about  October  28,  2016,  “EC,  LLC  and/or  David  Dennison”  entered  into  a  “confidential 
settlement  agreement  and  mutual  release”  with  “Peggy  Peterson,”  pursuant  to  which  “Peterson” 
agreed  not  to  disclose  certain  “confidential  infoimation  pertaining  to  [Dennison]”  in  exchange  for 
$130,000.  Hie  agreement  provided  that  “EC,  LLC”  would  wire  the  fimds  to  “Peterson’s”  attorney, 
who  would  then  transfer  funds  to  “Peterson.”  Cohen  signed  the  agreement  on  behalf  of  “EC, 
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LLC.”  The  agreement  stated  that  the  address  for  “EC,  LLC,”  which  was  later  refen-ed  to  in  the 
agi'eement  as  “Essential  Consultants,  LLC,”  was  Cohen’s  residence. 

e.  Consistent  with  the  “confidential  settlement  agreement  and  mutual  release,”  on  or 
about  November  1,  2016,  Davidson  transferred  $96,645  from  his  attorney  client  trust  account  at 
City  National  Bank  to  a  bank  account  in  Clifford’s  name.  Die  wire  had  the  annotation  “net 
settlement.”  On  the  same  day,  at  approximately  9:48  a.m.  Davidson  sent  Cohen  a  text  message 
with  a  picture  of  a  FedEx  delivery  confiiination,  stating  that  at  approximately  9:09  a.m.  a  package 
shipped  by  Davidson  the  previous  day  had  arrived  for  Cohen  at  his  Trump  Organization 
address.  On  the  same  day,  at  approximately  6:14  p.m.,  Davidson  sent  Cohen  an  email  with  an 
audio  file  attached  and  said  “Give  this  a  lesson  [sic]  and  then  call  me.”  The  audio  attachment  was 
titled  “Stormy .mp3”  and  was  a  five-minute  recording  of  Davidson  interviewing  Clifford  about 
recent  public  allegations  made  by  an  adult  film  star  named  Jessica  Drake  regarding  her  alleged 
past  affair  with  Tnimp;  in  the  recording,  Clifford  explained  the  reasons  she  believed  that  Drake 
was  not  credible.  Less  than  an  hour  later,  at  approximately  7:05  p.m.,  Cohen  called  Tnunp,  but  it 
appears  that  they  did  not  connect.  Cohen  then  called  a  telephone  number  belonging  to  Kellyaime 
Conway,  who  at  the  time  was  Trump’s  campaign  manager.  They  did  not  connect.  At 
approximately  7:44  pan.,  however,  Cohen  received  a  return  call  from  Conway,  which  lasted  for 
approximately  six  minutes, 

40.  On  November  4,  20 1 6,  just  three  days  after  the  Clifford  transaction  was  completed 
and  just  four  days  before  the  presidential  election,  the  Wall  Street  Journal  published  an  article 
alleging  that  the  National  Enquirer  had  “Shielded  Donald  Trump”  from  allegations  by  Playboy 
model  Karen  McDougal  that  she  and  Trump  had  an  affair.  The  article  alleged  that  AMI  had  agreed 
to  pay  McDougal  to  bury  her  story.  McDougal,  like  Clifford,  had  been  represented  by  Davidson. 
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Based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen  Email  Warrants 
and  iCloud  Warrant,  and  public  sour  ces,  it  appears  that  Cohen  spoke  frequently  to  Davidson, 
Howard,  Pecker,  and  Hicks  around  the  time  of  this  article’s  publication — -just  days  before  Election 
Day — about  the  importance  of  preventing  the  McDougal  and  Clifford  stories  from  gaining  national 
fraction.  Specifically,  I  have  learned  tire  following: 

a.  Between  4:30  and  8:00  p.m.  on  November  4,  Cohen  commrmicated  several  times 
witfrHoWard7PeckeFahd  Davidson.  For  ihstahce,  at  approxitMtely"4y49  p^m;7Cbhm^ent  Howard” 
a  text  message  with  a  screenshot  of  an  email  forwarded  to  him  by  another  Trump  Organization 
lawyer.  The  forwarded  email  was  from  a  Wall  Street  Journal  reporter,  and  asked  for  comment 
from  Trump  and/or  the  campaign  on  the  story.  Cohen  also  spoke  with  Hicks  several  times, 
including  shortly  before  and/or  after  calls  with  Pecker,  Howard  and  Davidson.  Indeed,  at 
approximately  7:33  p.m.,  using  two  different  cellphones  subscribed  to  him,  Cohen  appears  to  have 
been  talking  to  Davidson  and  Hicks  at  the  same  time. 

b.  At  approximately  8:51  p.m.,  Cohen  sent  Howard  a  message,  stating:  “She’s  being 
really  difficult  with  giving  Keith  a  statement.  Basically  went  into  hiding  and  um'eachable.”  One 
minute  later,  Howard  responded:  “I’ll  ask  him  again.  We  just  need  her  to  disappear.”  Cohen 
responded,  “She  definitely  disappeared  but  refuses  to  give  a  statement  and  Keith  cannot  push  her.” 
At  approximately  8:55  p.m.,  Howard  responded  to  Cohen’s  text:  “Let’s  let  the  dust  settle.  We  don’t 
want  to  push  her  over  die  edge.  She’s  on  side  at  present  and  we  have  a  solid  position  and  a  plausible 
position  that  she  is  riglitfully  employed  as  a  columnist.”  Based  on  my  involvement  in  this 
investigation,  I  believe  Cohen  and  Howard  were  referring  to  Karen  McDougal  when  they  were 
discussing  “she”  and  “her.”  Additionally,  I  believe  Howard’s  statement  that  “we  have  ...  a 
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plausible  position  that  she  is  rightfully  employed  as  a  columnist”  was  a  reference  to  the  fact  that 
AM  had  given  McDougal  payments  for  her  role  as  a  puiported  columnist  for  the  company. 

c.  At  approximately  8:58  p.m.  on  November  4,  2016,  Howard  attempted  to  reassure 
Cohen  about  the  effect  of  the  forthcoming  Wall  Street  Journal  article,  texting,  “I  think  it’ll  be  ok 
pal.  I  think  it’ll  fade  into  the  distance.”  Cohen  responded,  “He’s  pissed.”  Howard  wrote  back, 
“I’m  pissed!  You’re  pissed.  Pecker  is  pissed.  Keith  is  pissed.  Not  much  we  can  do.”  Based  on 
my  involvement  in  this  investigatimU  believe  Cohen  was  referring  to  Trump  when  hd^tafed  “He’^ 

pissed.”  Cohen  asked  Howard  at  approximately  9:00  p.m.  how  the  Wall  Street  Journal  could 
publish  its  article  if  “everyone  denies.”  Howard  responded,  “Because  there  is  the  payment  from 
AM.  It  looks  suspicious  at  best.” 

d.  At  approximately  9:03  p.m.,  Hicks  called  Cohen  and  they  spoke  for  two  minutes. 
At  approximately  9:11  p.m.,  Cohen  called  Howard  and  spoke  to  him  for  five  minutes.  At 
approximately  9:15  p.m.,  Hides  called  Cohen  and  they  spoke  for  nearly  seven  minutes.  Agam, 
Cohen  used  different  phones  for  these  two  calls,  such  that  he  appears  to  have  been  on  both  calls 
for  about  a  minute  of  overlap.  At  approximately  9:32  p.m.,  Cohen  texted  Pecker,  “The  boss  just 
tried  calling  you.  Are  you  free?”  A  minute  later,  Cohen  texted  Howard,  “Is  there  a  way  to  find 
David  quickly?” 

e.  At  approximately  9:50  p.m.,  the  Wall  Street  Journal  article  was  published  online. 
Howard  and  Hicks  both  sent  web  linlcs  for  the  article  to  Cohen.  Over  the  next  half  hour,  Cohen 
and  Howai-d  exchanged  several  text  messages  commenting  on  how  the  story  came  across.  The  next 
morning  on  November  5, 2016,  at  approximately  7:35  a.m.,  Cohen  texted  Hicks,  “So  far  I  see  only 
6  stories.  Getting  little  to  no  traction.”  Hicks  responded,  “Same.  Keep  praying!!  It’s  working!” 
Cohen  wrote  back,  “Even  CNN  not  talking  about  it.  No  one  believes  it  and  if  necessary,  I  have  a 
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statement  by  Storm  denying  everything  and  eontradicting  the  other  pom  stars  statement.  I  wouldn  t 
use  it  now  or  even  discuss  with  him  as  no  one  is  talking  about  this  or  cares!”  Based  on  my 
involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  the  above-referenced  recorded 
audio  statement  by  Clifford  that  he  obtained  from  Davidson,  and  was  stating  that  such  a  statement 
could  be  used  to  influence  potential  negative  media  relating  to  Tmmp,  but  was  unnecessary  at  that 
time.  Based  on  a  text  message  from  Hicks  to  Cohen,  I  believe  that  later  that  morning,  Pecker 

spoke  to  Trump. 

41.  On  or  aboutNovember  8, 2016,  Trump  won  the  election  for  President  of  the  United 

States. 

42.  On  or  about  January  12,  2018,  the  Wall  Street  Journal  fnst  reported  that  Cohen 
arranged  a  payment  to  Clifford.  On  or  about  January  22,  2018,  Common  Cause,  a  government 
watchdog  group,  filed  a  complaint  with  the  Federal  Election  Commission,  alleging  that  Cohen  had 
violated  campaign  finance  laws  by  malcing  the  payment  to  Clifford.  Based  on  my  review  public 
sources  following  that  report,  as  well  as  emails  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 

have  learned  the  following: 

a.  On  or  about  January  23,  2018,  the  day  after  Common  Cause  filed  its  complaint, 
Cohen  began  emailing  himself  drafts  of  statements  describing  his  payment  to  Clifford. 
Additionally,  on  January  23,  2018,  Cohen  emailed  the  following  draft  of  that  statement  to  an 

individual  who  appears  to  be  writing  a  book  on  Cohen  s  behalf. 

In  October  2016, 1  was  contacted  by  counsel  for  Ms.  Clifford  stating  that 
news  outlets,  including  ABC  news,  were  pursuing  the  2011  story  of  an 
alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.  Despite  the  fact  that 
both  parties  had  already  denied  the  allegation,  as  Mr.  Trump’s  longtune 
special  counsel  and  protector,  I  took  it  upon  myself  to  match  the  offer  and 
keep  the  story  from  breaking.  I  knew  the  allegation  to  be  false,  but  I  am 
also  a  realist  who  understands  that  just  because  something  is  false  doesn  t 
mean  that  it  doesn’t  create  harm  and  damage.  I  could  not  allow  this  to 
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occur.  I  negotiated  a  non-disclosure  agreement  with  Ms.  Clifford’s 
counsel  and  tendered  the  funds.  I  did  this  through  my  Delaware  LLC  and 
transferred  personal  funds  to  cover  the  agreement.  I  was  not  reimbursed 
any  monies  from  Mr.  Trump,  the  Trump  Organization,  any  third  party  or 
the  Presidential  campaign.  At  no  point  did  I  ever  advise  Mr.  Trump  of  my 
communications  or  actions  regarding  this  agreement.  As  outlandish  and 
unusual  as  this  may  appear,  the  Tramps  have  been  like  family  to  me  for 
over  a  decade.  It’s  what  you  do  for  family. 

(Emphasis  added.)  Based  on  my  involvement  in  this  investigation,  I  believe  that  the  above  email 
is  an  acknowledgement  that  the  allegation  of  the  affair  had  existed  for  some  time  (“...r/ze  2011 
story. . .”),  but  that  Cohen  was  motivated  to  “keep  the  story  from  brealcing”  again  in  October  2016. 

b.  On  or  about  February  13,  2018,  Cohen  said  in  a  statement  to  The  New  York  Times 
that  “Neither  the  Tramp  Oi'ganization  nor  the  Trump  campaign  was  a  party  to  the  transaction  with 
Ms.  Clifford.  The  payment  to  Ms.  Clifford  was  lawful,  and  was  not  a  campaign  contribution  or  a 
campaign  expenditure  by  anyone.”  Cohen  declined  to  answer  follow-up  questions  including 
whether  Trump  had  been  awai'e  of  the  payment,  why  Cohen  made  the  payment,  or  whether  smular 
payments  had  been  made  to  other  people. 

c.  On  or  about  February  14,  2018,  Cohen  was  asked  by  The  New  York  Times  whether 
Trump  had  reimbursed  hun,  whether  he  and  Trump  had  made  any  arrangement  at  the  time  of  the 
payment,  or  whether  he  had  made  payments  to  other  women.  Cohen  stated  in  response,  I  can  t 
get  into  any  of  that.”  On  or  about  February  14,  2018,  Cohen  also  stated  to  The  Washington  Post 
that:  “fri  a  private  transaction  in  2016, 1  used  my  own  personal  funds  to  frcilitate  a  payment  of 
$130,000  to  Ms.  Stephanie  Clifford.  Neither  the  Trump  Organization  nor  the  Trump  campaign 
was  a  party  to  the  transaction  with  Ms.  Clifford,  and  neither  reimbrnsed  me  for  the  payment,  either 
directly  or  indirectly.” 

43.  On  or  about  March  9,  2018,  Cohen  stated  to  ABC  News  that  “the  funds  were  taken 
from  my  home  equity  line  and  fransferred  internally  to  my  LLC  account  in  the  same  banlc. 
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44.  Accordingly,  for  the  foregoing  reasons,  there  is  probable  cause  to  believe  that 
Cohen  committed  violations  of  the  Campaign  Finance  Offenses  by  malcing  an  in-ldnd  conffibution 
to  Trump  or  the  Tnimp  campaign  in  the  fonn  of  a  $130,000  payment  to  Clifford  on  the  eve  of  the 
election.  Indeed,  while  he  denies  having  given  an  unlawful  contribution,  in  his  own  statements 
Cohen  has  admitted  that  he  paid  $130,000  of  his  “personal  funds”  to  Clifford  and  that  the  payment 
occurred  less  than  two  weeks  before  the  election,  as  Trump  was  facing  negative  media  allegations 
about  his~behavior  toward  women,  even  though  allegations  of  an  affair  between  Trump  and 
Clifford  existed  since  2011.  In  addition,  the  communication  records  set  forth  above  make  evident 
that  Cohen  communicated  with  members  of  the  Trump  campaign  about  his  negotiation  with 
Clifford’s  attorney  and  the  need  to  preclude  Clifford  from  making  a  statement  that  would  have 
reflected  negatively  on  the  candidate  in  advance  of  the  forthcoming  election. 

C.  Probable  Cause  Justifying  Search  of  the  Subject  Premises  and  Subject  Devices 

45 .  Based  on  the  foregoing,  my  review  of  records  produced  pursuant  to  subpoenas  and 
the  Cohen  Email  Warrants,  and  the  iCloud  Warrant,  and  my  training  and  experience,  there  is 
probable  cause  to  believe  that  tlie  Subject  Premises  and  Subject  Devices  have  been  used  m 
furtherance  of  the  Subject  Offenses  and  are  lUcely  to  contain  instrumentalities,  evidence,  and  fiiiits 
of  the  Subject  Offenses.  Specifically,  there  is  probable  cause  to  believe  that  Cohen  permanently 
resides  at  Subject  Premises-1  and,  at  least  in  part,  works  at  both  Subject  Premises-1  and  Subject 
Premises-2,  and  that  those  locations  contain  evidence  relating  to  the  Sterling  taxi  medallion 
transaction,  Cohen’s  assets,  Cohen’s  consulting  work  for  Essential  Consultants  EEC,  and  his 
payment  to  Clifford.  Additionally,  there  is  probable  cause  to  believe  that  Subject  Premises-3 
contains  evidence  of  Cohen’s  assets  and  his  payment  to  Clifford.  Finally,  there  is  probable  cause 
to  believe  that  Subject  Premises-4,  in  which  Cohen  is  temporarily  residing,  contains  electronic 
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devices,  including  Subject  Device-1  and  Subject  Device-2,  which,  in  turn,  contain  evidence  of  the 
Subject  Offenses,  such  as  evidence  relating  to  the  Sterling  taxi  medallion  transaction,  Cohen’s 
assets,  Cohen’s  consulting  work  for  Essential  Consultants  LLC,  and  his  payment  to  CUlford. 

46.  First,  there  is  probable  cause  to  believe  that  Cohen  lives  and  operates  his  businesses, 
at  least  in  part,  at  Subject  Premises-1.  Specifically,  from  my  review  of  property  records,  I  know 
that  Michael  Cohen  and  Laura  Cohen  own  (in  bust)  Subject  Premises-1.  From  my  review  of 

Cohen’s  tax  returns, Tknbw  H^lists^hi^lprimarybesidence  as  SubjecLPremises-l— Additionally^- 

from  my  review  of  emails  produced  pursuant  to  the  Cohen  Email  Warrants,  I  know  that  Cohen 
routinely  refers  to  Subject  Premises-1  as  his  home.  For  example,  on  or  about  September  28,  2017 
and  October  6,  2017,  Cohen  emailed  individuals  that  his  home  address  is  the  address  for  Subject 
Premises-1.  I  also  know  from  my  review  of  emails  that  Cohen  receives  package  delivery 
notifications  that  list  Cohen’s  address  as  the  address  for  Subject  Premises-1.  Cohen  has  also 
provided  the  address  of  Subject  Premises-1  as  the  address  for  Essential  Consultants  and  Michael 
D.  Cohen  &  Associates,  P.C.  For  example,  the  certificates  of  incoiporation  and  account  opening 
documents  at  Fust  Republic  for  both  entities  list  their  addresses  as  the  address  for  Subject 
Premises-1 .  See  supra  ft  1 8(b),  1 8(d).  The  consulting  agreement  between  Essential  Consultants 
and  AT&T  also  indicated  the  address  for  Essential  Consultants  is  the  address  for  Subject  Premises- 
1.  See  supra  ^  19(c). 

47.  There  is  also  probable  cause  to  believe  that  Subject  Premises-1  is  likely  to  contain 
instrumentalities,  evidence,  and  fruits  of  the  Subject  Offenses.  Specifically,  from  my  review  of 
emails  produced  pursuant  to  subpoena  and  the  Cohen  Email  Warrants  and  iCloud  Warrant,  as  well 
as  my  training  and  experience,  I  know  the  following: 
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a.  According  to  records  maintained  by  Sterling,  the  address  for  all  of  Cohen’s, taxi 
medallion  LLCs  is  the  address  for  Subject  Premises-1.  See  supra  11  16(c).  Additionally,  the 
medallion  loan  documents  indicate  that  any  mailings  related  to  the  loans  should  be  sent  to  Subject 
Premises-1 .  See  id.  Based  on  my  training  and  experience,  as  well  as  my  review  of  public  sources, 

I  know  that  individuals  keep  records  of  properties  and  assets  in  which  they  have  ownership 
interests.  Accordingly,  I  submit  that  Subject  Premises-1  likely  contains  evidence  of  Cohen’s 

ownership  of  WtoinmedaiiorrEECsr  the-revenue  that- those  medallions-^generate^  and  the- 

transaction  with  Sterling  in  2014  to  re-finance  the  medallion  loans  that  were  then  with  Capital  One 


Bank. 


b.  From  my  review  of  records  maintained  by  Sterling,  I  also  loiow  that  Sterling 


addressed  documents  relating  to  the  | 


Itransaction  and  Cohen’s  attempts  to  modify  the 


terms  of  the  medallion  loans  to  Subject  Premises-1.  For  instance,  Sterling  addressed  the 
transaction  term  sheet,  supra  f  16(1),  and  its  demand  letter  and  notice  of  default,  see  supra  H 
16(q),  to  Subject  Premises-!.  Accordingly,  Subject  Premises-1  likely  contains  evidence 

concerning  the  ^^^^transaction  and  Cohen’s  negotiations  with  Sterling.  Some  of  those 

-were  concealed  from 


records— such  as  records  relating  to  a  payment  fi-om  Cohen  to  | _ 

Sterling  and  cannot  be  obtained  via  subpoena  to  Sterling.  Additionally,  even  where  documents 
were  sent  to  Cohen  by  Sterling  (and  therefore  are  available  from  Sterling  via  subpoena),  the  fact 
that  they  may  be  found  in  Subject  Premises-1  will  be  relevant  to  Cohen’s  possession  or  knowledge 


of  the  documents. 

c.  From  my  review  of  records  maintained  by  First  Republic,  I  know  that  Cohen 
provided  the  address  for  Subject  Premises-1  as  the  mailing  addresses  for  the  Essential  Consultants 
Account  and  MDC&A  Account.  See  supra  18(b),  18(e).  Accordingly,  it  is  likely  that  Subject 
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Premises-1  contains  records  relating  to  the  Essential  Consultants  Account  and  MDC&A  Account, 
including,  among  other  things,  account  opening  documents,  bank  statements,  documents  provided 
as  part  of  the  know-your-customer  process,  any  notes  made  by  Cohen  when  he  was  opening  the 
accounts,  wire  transfer  records,  and  canceled  checks.  Even  where  these  records  can  be  obtained 
from  First  Republic,  the  fact  that  they  may  be  found  in  Subject  Premises-1  will  be  relevant  to, 
among  other  things,  Cohen’s  ownership  of  the  accounts,  or  his  knowledge  of  fransactions  or  the 
existence  of  fundsTn  accounf^ 

d.  Based  on  my  review  of  records  maintained  by  Capital  One  Bank,  TD  Bank,  Morgan 
Stanley,  City  National  Bank,  Signature  Banlc,  and  Bethpage  Credit  Union,  I  know  that  Cohen 
provided  the  address  for  Subject  Premises-1  as  the  mailing  for  his  accounts  at  each  of  these 
financial  institutions.  Accordingly,  it  is  likely  that  Subject  Premises-1  contains  records  relating  to 
these  accounts,  including,  among  other  things,  banlc  statements  that  list  account  balances.  The 
existence  of  these  records  in  Subject  Premises-l  will  be  relevant  to,  among  other  things,  Cohen’s 
ownership  of  the  accounts  and  his  knowledge  of  the  balances  in  these  accounts. 

e.  Additionally,  Cohen  may  have  records  of  other  bank  accounts  or  assets  friat  weie 
not  disclosed  to  Sterling  and  are  not  presently  laiown  by  law  enforcement.  For  example,  as 
described  above,  Cohen  has  received  interest  income  since  2015  that  he  has  not  disclosed  to 
Sterling  or  paid  taxes  on.  Also,  on  Cohen’s  August  2014  Financial  Statement,  supra  1 16(e), 
he  disclosed  $10,000,000  in  “investments  in  overseas  entities.”^°  The  value  of  these  mvestments 
was  omitted  from  subsequent  financial  statements.  However,  for  the  reasons  outlined  above,  there 
is  probable  cause  to  believe  that  Cohen  omitted  the  value  of  those  investments  from  his  2017 


30  Based  on  my  participation  in  an  interview  with  Sterling  Employee-3, 1  have  leai-ned  that 
Cohen  told  Sterling  Employee-3  that  the  reference  to  “investments  in  overseas  entities  on  his 
2014  Financial  Statement  was  to  serve  merely  as  a  “placeholder”  for  potential  future  investments. 
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financial  statements  in  order  to  understate  his  assets.  As  Subject  Premises-1  is  Cohen’s  primary 
residence  and  he  uses  Subject  Premises-1  as  the  mailing  address  for  banlc  records,  there  is  probable 
cause  to  believe  that  account  statements  for  unlcnown  bank  accounts  or  assets  concealed  from 

Sterling  are  likely  to  be  found  in  Subject  Premises- 1. 

f.  Based  on  my  review  of  records  maintained  by  AT &T  and  produced  pursuant  to  the 

Cohen  Email  Warrants,  I  Imow  that  the  address  Cohen  provided  to  AT&T  for  Essential  Consultants 
is  the  addre^for  Subject  Premi^s^-  lT  A'ee  ^-r9  (c)^  Therefore,i;here  is  probable  cause -to 

believe  that  Subject  Premises-1  will  contain  evidence  concerning  the  operation  of  Essential 
Consultants  or  money  that  Cohen  received,  thi'ough  Essential  Consultants,  from  AT&T. 
Additionally,  because  Cohen  used  the  address  for  Subject  Premises-1  for  at  least  one  consultmg 
arrangement  involving  Essential  Consultants,  there  is  probable  cause  to  believe  that  Subject 
Premises-1  may  contain  records  of  other  consulting  arrangements  that  Cohen,  thi'ough  Essential 

Consultants,  has  with  other  individuals  or  entities. 

g.  Based  on  my  review  of  records  maintained  by  GetzeP  s  accounting  firm,  and  emails 

produced  pursuant  to  the  Cohen  Email  Warrants,  I  have  learned  that  GetzeP  s  accounting  firm  sent 
documents  to  Subject  Premises-1  and  used  the  address  for  Subject  Premises-1  as  the  address  listed 
on  Cohen’s  personal  and  corporate  tax  returns.  supra  1  16(n).  For  instance,  on  or  about 
October  6,  2017,  an  employee  at  GetzePs  accounting  firm  emailed  Cohen  that  she  had  sent 
Cohen’s  September  2017  Financial  Statement  by  FedEx  to  Cohen’s  attention.  Accordmgly, 

Cohen’s  tax  records  are  lilcely  to  be  found  in  Subject  Premises-1. 

h.  Based  on  my  review  of  banlc  records  and  publicly-available  documents,  I  know  that 
Cohen  used  $130,000  from  a  home  equity  line  of  credit  on  Subject  Premises-1  to  pay  Clifford.  I 
also  know  that  on  the  settlement  and  nondisclosure  agreement  between  “Peggy  Peterson”  and  “EC, 
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LLC,”  the  address  for  Essential  Consultants  is  Subject  Premises-1.  Accordingly,  Subject 
Premises-1  is  lilcely  to  contain  evidence  of  the  Campaign  Finance  Offenses,  including  settlement 
and  nondisclosure  agreements,  payment  records,  written  and  email  correspondence,  and  records 

pertaining  to  the  home  equity  line  of  credit. 

i.  Based  on  my  review  of  emails  produced  pui  suant  to  the  Cohen  Email  Warrants  and 

iCloud  Wan-ant,  I  know  that  Cohen  used  at  least  one  Apple  iPhone,  an  Apple  iPad  Mini,  and  a 

"l^Book  Pro  to  accesslxi^Ia^^Sr^^Wmyrevte^ 

Apple  pursuant  to  the  iCloud  Warrant,  I  Imow  that  electronic  devices  linlced  to  Cohen’s  iCloud 
account  were  used  at  Subject  Premises-1  to,  among  other  things,  place  telephone  calls  and  backup 
files  to  Cohen’s  iCloud  account.  Accordingly,  there  is  probable  cause  to  believe  that  Subject 
Premises-1  contains  electronic  devices,  including  certain  Apple  products,  that  for  reasons 

discussed  below  are  likely  to  contain  evidence  of  the  Subject  Offenses. 

j .  Based  on  my  review  of  emails  produced  pursuant  to  the  Cohen  Email  Warrants,  I 

understand  that  Subject  Premises-l  recently  sustained  water  damage  to  certain  parts  of  the 
premises,  and  that  Cohen  has  engaged  contractors  to  perform  certain  remediation  work  on  the 
premises.  In  addition,  as  set  foifh  above,  I  believe  that  Cohen  and  his  family  are  temporarily 
residing  at  Subject  Premises-4  m  the  Loew’s  Regency  Hotel,  which  is  approximately  two  blocks 
fi-om  Subject  Premises-1.  However,  based  on  my  review  of  a  work  order  sent  to  Cohen’s  email 
by  a  contractor,  I  understand  that  the  first  phase  of  the  work  order  called  for  the  contractor  to  “Pack 
&  Remove  all  items  &  finmishings  in  Living  Room,  Kitchen,  Sons  Room  &  Dining  Room”  and 
store  them  off-site,  hi  addition,  based  on  my  review  of  drawings  sent  to  Cohen  by  the  contractor, 
it  appears  that  the  work  is  primarily  being  done  in  these  rooms.  Thus,  I  believe  that  the 
construction  -  to  the  extent  it  is  still  ongoing  -  would  not  necessarily  have  caused  Cohen  to  move 
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all  documents  or  evidence  responsive  to  the  warrant  out  of  Subject  Premises-1,  because  it  does  not 
appear  that  work  is  being  done  to  the  portion  of  Subject  Premises-1,  such  as  a  home  office  or 
Cohen’s  own  room,  where  such  documents  or  evidence  would  most  likely  be  found.^^ 

48.  Second,  there  is  probable  cause  to  believe  that  Cohen  uses  Subject  Premises-2  as 
office  space,  and  also  that  Subject  Premises-2  contains  certain  electronic  devices.  Specifically, 
fi-om  my  review  of  the  “strategic  alliance  agreement”  between  Squhe  Patton  Boggs  and  Cohen, 
andltnyl’evie^dffhe  press  relea^  on  Squire^PattoirBoggs’s  website,  I  knowdhat  Cohen  has  an 
office  at  Subject  Premises-2.  See  supra  18(d),  19(e).  Indeed,  I  have  learned  that  pursuant  to 
Cohen’s  agreement  with  the  law  fii'm,  he  has  “dedicated  and  segregated  office  space”  in  Squire 
Patton  Boggs’s  offices  on  the  23rd  floor  of  30  Rockefeller  Plaza,  and  that  the  space  is  “physically 
separate”  from  the  firm’s  offices  and  has  “locked  doors  and  its  own  locked  file  cabinets.  See 
supra  f  19(e).  Additionally,  I  know  that  under  the  teims  of  the  agreement,  Cohen  agreed  to 
^^arrange  for  [hisj  own  computer  server  system  that  is  not  connected  to  fSquire  Patton  Boggs  sj 
computer  network  system.”  I  know  from  my  participation  in  an  inteiview  with  Getzel,  who  met 
Cohen  at  Subject  Premises-2  in  2017,  that  Subject  Premises-2  is  an  office  with  a  door,  it  appears 
to  be  used  only  by  Cohen,  and  it  contains,  among  other  things,  a  computer  and  paper  files. 
According  to  Getzel,  when  Getzel  saw  Cohen  at  Subject  Premises-2,  he  had  two  cellular 
telephones  in  Subject  Premises-2.  I  also  laiow  from  my  review  of  emails  produced  pursuant  to  the 
Cohen  Email  Warrants  that  Cohen  uses  the  address  for  Subject  Premises-2  in  the  signature  block 

As  noted  below,  based  on  my  tiaining  and  experience,  I  believe  that  individuals  who  travel  or 
stay  in  hotels  for  short-term  periods  commonly  bring  some  items  with  them,  such  as  portable 
electronic  devices  or  sensitive  items,  meaning  that  Cohen  has  likely  taken  some  evidence  from 
Subject  Premises-1  to  Subject  Premises-4.  Nevertheless,  given  the  temporary  natoe  of  Cohen’s 
stay  at  Subject  Premises-4  and  tire  scope  of  the  work  being  done  at  Subject  Premises-1, 1  believe 
it  is  unlikely  that  Cohen  has  taken  all  evidence  that  would  be  subject  to  seizure  out  of  Subject 
Premises-1. 
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on  his  emails.  Based  on  my  review  of  notes  of  a  call  between  Cohen  and  First  Republic  Employee- 
2  (which  notes  were  taken  by  another  First  Republic  employee,  who  was  participating  in  the  call 
and  taking  notes),  I  Icnow  that,  on  or  about  November  15,  2017,  Cohen  told  First  Republic 
Employee-2  that  he  had  a  new  office  at  30  Rock.  Moreover,  I  Icnow  from  an  article  in  Vanity  Fair 
published  on  or  about  February  14,  2018,  that  Cohen  was  interviewed  by  the  magazine  in  Subject 
Premises-2  in  or  about  February  2018. 

- ““497 - There'i^lsoiprobable  cause  to  believe  that  SubjectrPremises-2  is-likely  to  contain 

instrumentalities,  evidence,  and  fruits  of  the  Subject  Offenses.  Specifically,  from  my  review  of 
emails  produced  pursuant  to  subpoena  and  the  Cohen  Email  Warrants  and  iCloud  Warrant,  as  well 
as  my  training  and  experience,  I  know  the  following: 

a.  According  to  records  maintained  by  Sterling,  when  Cohen  was  emailing  with 
Sterling  Employee-3  in  2018  about  a  modification  to  his  existing  loan  from  Sterling,  Cohen  listed 
his  address  in  his  email  as  the  address  for  Subject  Premises-2.  See  supra  K  16(t),  16(u). 
Accordingly,  Subject  Premises-2  likely  contains  evidence  concerning  Cohen’s  loan  modification 
negotiations  with  Sterling. 

b.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
know  that  the  address  Cohen  provided  to  KAI  and  BTA  for  Essential  Consultants  is  the  address 
for  Subject  Pi-emises-2.  See  supra  fl  19(a),  19(b).  Therefore,  there  is  probable  cause  fo  believe 
that  Subject  Premises-2  will  contain  evidence  concerning  the  operation  of  Essential  Consultants 
or  money  that  Cohen  received,  tlirough  Essential  Consultants,  from  KAI  and  BTA,  among  other 
entities  with  which  Cohen  had  a  consulting  arrangement.  Additionally,  based  on  my  review  of 
emails  sent  in  2018  that  were  obtained  pursuant  to  the  Cohen  Email  Warrants,  I  know  that  Cohen 
continues  to  enter  into  consulting  airangements  through  Essential  Consultants,  and  agreements 
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relating  to  those  arrangements  indicate  that  Essential  Consultants  is  located  at  Subject  Premises- 
2.  Additionally,  because  Cohen  used  the  address  for  Subject  Premises-2  for  multiple  consulting 
an-angements  involving  Essential  Consultants,  there  is  probable  cause  to  believe  that  Subject 
Premises-2  may  contain  records  of  other  unlcnown  consulting  arrangements  that  Cohen  has  with 

other  individuals  or  entities. 

c.  Based  on  my  review  of  records  maintained  by  Getzel’s  accounting  firm,  and  emails 
■^^^Suce^uant  to  lh^^^  as  weiramyTte-ticipationrinranrinter^^ 

Getzel,  I  have  learned  that  Getzel  visited  Subject  Premises-2  to  meet  with  Cohen  about  his  taxes. 
See  supra  H  20(a).  At  that  meeting,  Getzel  discussed  with  Cohen  whether  Cohen  should  disclose 
Essential  Consultants  on  his  personal  financial  statement  to  banks.  According,  there  is  probable 
cause  to  believe  that  Subject  Premises-2  will  contain  evidence  relating  to  Cohen’s  taxes,  or  notes 
of  his  conversation  with  Getzel.  Moreover,  the  fact  that  Cohen  used  Subject  Premises-2  for  a 
meeting  regarding  his  personal  financial  matters  provides  probable  cause  to  believe  that  documents 

and  information  regarding  his  finances  will  be  found  in  Subject  Premises-2. 

d.  Based  on  my  participation  in  an  interview  with  Getzel,  I  know  that  Cohen  mamtams 
a  computer  in  Subject  Premises-2.  From  my  review  of  IP  data  produced  pursuant  to  a  subpoena 
and  pen  register  to  Google,  it  appeal's  that  Cohen  is  logging  into  his  Gmail  account  from  Subject 
Premises-2.  Accordingly,  there  is  probable  cause  to  believe  that  Subject  Premises-2  contains 
electronic  devices,  that  for  reasons  discussed  below  are  likely  to  contain  evidence  of  the  Subject 

Offenses. 

e.  Based  upon  my  traming  and  experience,  I  have  learned  that  individuals  who 
maintain  businesses  typically  keep  records  relating  to  the  business-^uch  as  contracts  with  clients 
and  records  of  payments-at  the  business'  identified  location.  I  am  not  aware  of  any  addresses 
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associated  with  Essential  Consultants  other  than  Subject  Premises-1  and  Subject  Premises-2. 
Accordingly,  there  is  probable  cause  to  believe  that  Subject  Premises-1  and  Subject  Premises-2 
will  contain  business  reeords  for  Essential  Consultants. 

50.  Third,  there  is  probable  cause  to  believe  that  Subj ect  Premises-3  is  likely  to  contain 

instrumentalities,  evidence,  and  Suits  of  the  Subject  Offenses.  In  particular; 

a.  As  noted  above,  Cohen  has  two  bank  accounts  at  TD  Bank.  In  or  about  November 
^17,  as  CAhen  waSeceivihg  substaiSffl  income^ffdirrcon^lting  work— which  he  did  not  disclose 
to  Sterling— Cohen  opened  the  safety  deposit  box  at  TD  Banlc,  which  is  Subject  Premises-3.  In 
light  of  the  aforementioned  evidence  that  Cohen  conceals  assets,  including  assets  at  TD  Bank, 
there  is  probable  cause  to  believe  that  Subject  Premises-3  contains  financial  assets,  objects  of  value 
and/or  documents  relating  to  such  assets  or  objects  of  value  that  Cohen  likely  did  not  disclose  to 
Sterling.  Indeed,  based  on  my  tiaining  and  experience,  I  am  aware  that  people  often  conceal 
valuable  items  in  safety  deposit  boxes.  Accordingly,  there  is  probable  cause  to  believe  that  Subject 
Premises-3  will  contain  evidence  of  the  Bank  Fraud  Offenses. 

b.  In  addition,  based  on  my  review  of  records  produced  by  TD  Bank,  I  know  that 
Cohen  has  accessed  the  vault  in  which  Subject  Premises-3  is  stored  on  two  occasions.  The  first 
such  occasion  was  on  November  10,  2017.  Cohen  signed  into  the  vault  at  approximately  5:35  and 
out  of  vault  at  approximately  5:39  on  that  date.^^  Based  on  my  review  of  toll  lecords,  I  know  that 
Cohen’s  first  call  after  he  signed  out  of  the  safety  deposit  box  -  approximately  45  minutes  latei'- 
was  to  Keith  Davidson.  Specifically,  at  6:25  p.m.  Cohen  called  Davidson  and  they  spoke  for  less 
than  a  minute;  three  minutes  later,  Davidson  called  Cohen  back  and  they  spoke  for  approximately 


The  entry  in  the  bank’s  log  book  does  not  specify  whether  this  is  A.M.  or  P.M.  However,  I  infer 
that  it  is  P.M.,  because  it  is  unlikely  that  the  bank  would  have  been  open  at  5:35  and  5:39  a.m. 
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22  minutes.  The  second  such  occasion  was  on  Febraaiy  2,  2018,  which  is  during  the  time  period 
numerous  media  reports  about  Cohen’s  payment  to  Clifford  were  being  published,  and  is  one  day 
after  it  appears  that  Cohen’s  family  moved  into  Subject  Premises-4,  as  set  forth  above.  The  timing 
of  Cohen’s  two  visits  to  the  vault  -  one  shortly  before  a  call  to  Keith  Davidson  and  the  other  around 
the  time  that  Cohen  came  under  media  scrutiny  in  connection  with  the  payment  to  Davidson’s 
client  —  gives  rise  to  probable  cause  to  believe  that  Subject  Preinises-3  will  contain  evidence  of  the 
Cam^i^Finance^Offensesf  mch  as^ommmts^relevant  to  th^Cohen’s  dealing  with  Keiflr 
Davidson  and  the  payment  to  Clifford,  including  documents  or  evidence  that  Cohen  did  not  want 
to  leave  in  his  apartment  where  constniction  workers  would  be  present.^^ 

5 1 .  Based  on  my  review  of  emails  obtained  pursuant  to  the  Cohen  Email  Warrants  and 
cell  phone  location  information,  I  believe  that  Cohen  is  temporarily  residing  in  Subject  Premises- 
4.  See  supra  3(d).  There  is  also  probable  cause  to  believe  that  Subject  Premises-4  contains 
instrumentalities  and  evidence  of  the  Subject  Offenses,  including,  the  following: 

a.  As  described  above,  it  appears  that  Cohen  moved  to  Subject  Premises-4  on  or  about 
February  1,  2018,  at  which  time  numerous  media  reports  about  Cohen’s  involvement  in  the 
payment  to  Clifford  were  being  published.  See  supra  3(d).  During  this  time  same  period, 
Cohen  was  frequently  conesponding  with  the  media  and  sent  himself  and  others  statements  about 
liis  involvement  in  the  payment  to  Clifford.  See  supra  42(a)-(c).  Thus,  there  is  probable  cause 
that  Cohen  took  at  least  some  documents  and  evidence  relating  to  the  Clifford  payment  with  him 
to  Subject  Premises-4,  in  order  to  reference  and  consult  them  in  connection  witli  these  statements. 


As  noted  above.  Subject  Premises-3  is  approximately  five  inches  by  ten  inches.  Accordingly,  I 
do  not  believe  that  it  would  fit  a  lai-ge  volume  of  hard  copy  documents;  however,  a  small  number 
of  hard-copy  documents,  or  a  large  volume  of  documents  contained  on  a  flash  drive  or  other 
portable  storage  device,  would  fit  m  Subject  Premises-3. 
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b.  As  described  above,  at  the  time  Cohen  moved  to  Subject  Premises-4,  he  was  also 
in  the  midst  of  ongoing  negotiations  with  Sterling  regarding  the  refinancing  of  his  medallion  debts. 
For  example,  on  January  30, 2018,  Cohen  had  a  lengthy  phone  call  with  Sterling  Employee-3  about 
his  finances  and  the  proposed  restructuring,  and  on  February  1,  2018,  Cohen  sent  an  email  to 
Sterling  Employee-3  claiming  that  he  did  not  have  more  than  $1.25  million  in  cash.  See  supra 
16(u).  Thus,  there  is  probable  cause  that  Cohen  took  at  least  some  documents  and  evidence  relating 
to  his  ongoing  negotiationsmtlTSterlihp^ith  him  tb^Su6jecfPremises^4;  in  order  to 

consult  them  in  connection  with  these  negotiations. 

c.  As  described  above,  Cohen  used  at  least  one  Apple  iPhone,  an  Apple  iPad  Mini, 
and  a  MacBook  Pro  to  access  his  iCloud  account,  and  these  electronic  devices  linlced  to  Cohen’s 
iCloud  account  were  used  at  Subject  Premises- 1  -  Cohens’  permanent  residence  -  to  place 
telephone  calls  and  bacloip  files  to  Cohen’s  iCloud  account.  See  supra  47(i).  Although  Cohen’s 
stay  at  Subject  Premises-4  is  temporary,  based  on  my  training  and  experience  I  know  that 
individuals  who  travel  or  stay  in  hotels  for  short-term  periods  commonly  bring  portable  electronic 
devices  with  them,  such  as  cellular  phones,  tablets,  or  laptops.  Accordmgly,  there  is  probable 
cause  to  believe  that  Subject  Premises-4,  where  Cohen  currently  appears  to  be  residing,  contains 
electronic  devices,  including  Subject  Device-1,  Subject  Device-2,  and/or  certain  Apple  products, 
that  for  the  reasons  discussed  herein  are  likely  to  contain  evidence  of  the  Subject  Offenses. 

d.  Moreover,  as  set  forth  above,  based  on  cellphone  location  information  I  know  that 
Subject  Device-1  and  Subject  Device-2  were  in  the  vicinity  of  Subject  Premises-4  as  recently  as 
this  morning  (April  8,  2018).  As  set  forth  above,  there  is  probable  cause  to  believe  that  Cohen 
used  the  Subject  Devices  in  furtherance  of  the  Subject  Offenses,  including  to  communicate  with 
Sterling  employees  regarding  the  medallion  transaction,  with  First  Republic  employees  regarding 
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the  Essential  Consultants  Account,  with  his  accountant  regarding  his  finances,  and  with 
individuals,  such  as  Davidson,  Howard  and  Pecker,  involved  in  the  $130,000  payment  to  Clifford. 

52.  Although  Cohen  appears  to  be  residing  currently  in  Subject  Premises-4,  it  is 
unknown  whether  Cohen  will  be  physically  present  within  Subject  Premises-4  at  the  moment  the 

warrantsoughthereinai-e  executed.  IfCohen  is  within  Subject  Premises-4  at  that  moment.  Subject 

Device-1  and  Subject  Device-2  -  his  cellphones  -  will  lilcely  also  be  within  Subject  Premises-4. 

If  Cohen  is  not  within  Subjecmeii^rse'^WH5nieiif,Th^^^^ 
wherever  he  is  located  (which,  based  on  location  data  for  Subject  Device-1  and  Subject  Device-2 
as  recently  as  today,  is  likely  to  be  in  the  Southern  District  of  New  York).  As  such,  this  warrant 
seelcs  separate  authority  to  seize  Subject  Device-1  and  Subject  Device-2,  in  the  event  that  those 
devices  are  not  located  within  Subj ect  Premises-4  (or  another  Subj ect  Premises)  at  the  moment  the 

warrants  sought  herein  are  executed. 

D.  Probable  Cause  Justifying  Search  of  ESI 

53.  Based  on  the  foregoing,  there  is  probable  cause  to  believe  that  Subject  Premises-1, 

Subject  Premises-2  and  Subject  Premises-4  contain  electronic  devices  that  are  lUcely  to  contam 

evidence,  fiuits,  and  instrumentalities  of  the  Subject  Offenses  (and,  as  set  forth  above,  that  Subject 

Device-1  and  Subject  Device-2  aie  themselves  electronic  devices  that  are  likely  to  contam 

evidence  of  the  Subject  Offenses).  Specifically,  based  on  my  review  of  information  produced 

pursuant  to  the  Cohen  Email  Warrants,  the  iCloud  Warrant,  and  subpoenas,  as  well  as  pen  register 

data,  I  submit  that  there  is  probable  cause  that  Subject  Premises-1  contains  an  Apple  iPadMmi,  a 

MacBook  Pro,  and  has,  at  various  times,  contained  Apple  cellphones;  similarly,  there  is  probable 

cause  that  Subject  Premises-2  contains  a  computer  and  has,  at  various  times,  contamed  Apple 
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cellphones.  These  devices  are  likely  to  include  evidence,  fruits,  and  instrumentalities  of  the 
Subject  Offenses  for  the  following  reasons: 

a.  As  described  throughout  this  affidavit,  Cohen  used  email  to  send  and  receive 
communications  related  to  the  Subject  Offenses.  In  particular,  Cohen  used  email  to  send  and 
receive  communications  with  Sterling,  Fu  st  Republic,  Getzel,  the  entities  to  which  he  is  providing 
consulting  services,  Davidson,  and  Howard,  among  others.  While  some  of  these  emails  have 
already  been  obtained  vifr subpoenas  and  kearch  warrants, Tlmow  from  my  training  and“expeiieiice 
that  individuals  can  and  do  delete  emails  from  their  Internet-based  inboxes  but  retain  copies  of 
those  emails  on  then  hard  drives.  I  also  know  that  individuals  often  have  multiple  email  accoimts, 
some  of  which  may  not  be  known  to  law  enforcement,  and  as  a  result  electronic  devices  can  be  a 
unique  repository  of  all  emails  relevant  to  certain  Subject  Offenses.  Indeed,  from  my  involvement 
in  this  investigation,  I  loiow  that  Cohen  had  an  email  account  with  the  Trump  Organization,  but 
the  USAO  and  FBI  have  not  been  able  to  obtain  the  contents  of  that  account  to  date.  Thus,  emails 
relevant  to  the  Subject  Offenses  are  lUcely  stored  on  electronic  devices  in  Subject  Premises-1, 
Subject  Premises-2  and/or  Subject  Premises-4. 

b.  Additionally,  Subject  Premises-1,  Subject  Premise-2  and  Subject  Premises-4  likely 
contain  electronic  copies  of  documents  relevant  to  the  Subject  Offenses.  Indeed,  I  know  from  my 
training  and  experience  that  individuals  often  retain  copies  of  important  documents  on  their 
computers  or  other  electronic  devices  capable  of  storing  information,  including  cellphones  (such 
as  the  Subject  Devices)  and  tablets.  Here,  there  are  a  number  of  documents  that  Cohen  has  likely 
retained  that  will  be  relevant  to  the  Subject  Offenses.  For  example,  elecfronic  devices  may  include 
documentation  of  Cohen’s  true  net  worth,  a  listing  of  his  assets,  an  accounting  of  his  available 
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cash,  consulting  agreements  with  third  parties,  and  documentation  of  his  payment  to  Clifford, 

among  other  evidence  of  the  Subject  Offenses. 

c.  Third,  I  Icnow  from  my  review  of  emails  obtained  pursuant  to  the  Cohen  Email 
Warrants  that  Cohen  sent  up  online  banking  with  First  Republic.  Based  on  my  training  and 
experience,  I  know  that  individuals  who  set  up  online  banking  often  receive  electronic  notices 
concerning  financial  transactions  and,  on  occasion,  save  records  of  thefr  financial  transactions  to 
their^vices.  Accor^glyTthere  is  probable  cause  to  believe  that  Cohen’s  electronic  devices 
contain  evidence  of  banldng  activity,  including  the  existence  of  bank  accounts  or  assets  that  Cohen 
did  not  disclose  to  Sterling  or  Melrose. 

d.  Fourth,  from  my  review  of  records  produced  by  Apple,  I  know  that  Cohen 
communicates  usmg  text  message  as  well  as  encrypted  communications  applications.  These 
applications  that  Cohen  has  downloaded  onto  a  phone  include,  but  are  not  limited  to,  WhatsApp, 
Signal,  and  Dust.  I  know  from  my  review  of  toll  records  and  text  messages  that,  in  pmticular, 
Cohen  communicated  with  Pecker  using  these  encrypted  applications.  Accordingly,  there  is 
probable  cause  to  believe  that  Cohen’s  cellphones  -  the  Subject  Devices  -  will  contam  encrypted 
messages  that  are  not  otherwise  accessible  relating  to  the  Subject  Offenses. 

54.  Based  on  my  training  and  experience,  I  know  that  individuals  who  engage  in 
financial  crimes  commonly  use  computers  to  communicate  with  co-conspirators,  keep  financial 
ledgers,  and  retain  fraudulent  documents.  As  a  result,  they  often  store  data  on  their  computers 
related  to  their  illegal  activity,  which  can  include  logs  of  online  or  cellphone-based  chats  with 
co-conspirators;  email  correspondence;  contact  information  of  co-conspirators,  including 
telephone  numbers,  email  addresses,  and  identifiers  for  instant  messaging  and  social  medial 
accounts;  bank  account  numbers;  and/or  records  of  uses  of  funds. 
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55.  Based  on  my  training  and. experience,  I  also  know  that,  where  computers  are  used 
in  furtherance  of  criminal  activity,  evidence  of  the  criminal  activity  can  often  be  found  months  or 
even  years  after  it  occurred.  This  is  typically  true  because: 

•  Electronic  files  can  be  stored  on  a  hard  drive  for  years  at  little  or  no  cost  and  users  thus 
have  little  incentive  to  delete  data  that  may  be  useful  to  consult  in  the  future. 

»  Even  when  a  user  does  choose  to  delete  data,  the  data  can  often  be  recovered  months 
or  years  later  with  the  appropriate  forensic  tools.  When  a  file  is  “deleted”  on  a  home 

_ computer,  the  data  contained  in  the  file  does  not  actually  disappear,  but  instead  remains 

OT  the  hard  di'ive,  in  “slack  space,”  until  it  is  overwritten  by  new  data  that  cannot  be 

stored  elsewhere  on  the  computer.  Similarly,  files  that  have  been  viewed  on  the  Internet 
are  generally  downloaded  into  a  temporary  Internet  directory  or  “cache,”  which  is  only 
overwritten  as  the  “cache”  fills  up  and  is  replaced  with  more  recently  viewed  Internet 
pages.  Thus,  the  ability  to  retrieve  from  a  hard  drive  or  other  electronic  storage  media 
depends  less  on  when  the  file  was  created  or  viewed  than  on  a  particular  user’s 
operating  system,  storage  capacity,  and  computer  habits. 

•  In  the  event  that  a  user  changes  computers,  the  user  will  typically  transfer  files  from 
the  old  computer  to  the  new  computer,  so  as  not  to  lose  data.  In  addition,  users  often 
keep  backups  of  their  data  on  electronic  storage  media  such  as  thumb  drives,  flash 
memory  cards,  CD-ROMs,  or  portable  hard  drives. 

56.  Based  on  the  foregoing,  I  respectftilly  submit  there  is  probable  cause  to  beheve  that 
Cohen  engaged  in  the  Subject  Offenses,  and  that  evidence  of  this  criminal  activity  is  likely  to  be 
found  in  the  Subject  Premises,  on  computers  and  electronic  media  found  in  the  Subject  Premises, 
and  on  the  Subject  Devices.  In  particulai',  there  is  probable  cause  to  believe  that  the  Subject 
Premises  and  Subject  Devices  will  contain  evidence,  fruits,  and  instrumentalities  of  violations  of 
the  Subject  Offenses,  as  more  fully  described  m  Sectiop  II  of  Attachments  A,  B,  C,  D,  E  and  F  to 
the  proposed  warrants,  including  the  following: 

a.  Evidence  necessary  to  establish  the  occupancy  or  ownership  of  the  Subject 
Premises,  including  without  limitation,  utility  and  telephone  bills,  mail  envelopes,  addressed 
con* *espondence,  bank  statements,  identification  documents,  and  keys. 

b.  Evidence  relating  to  Sterling,  Melrose,  and/or  taxi  medallions. 
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c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Cohen  and/or  entities 
associated  with  him  to  ti'ansfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to^^^^^^^^^^nd/or  entities  associated  with  him. 

d.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Mehose. 

e.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

f.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 

g.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annua!  income,  income  sour  ces,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  banlc  records. 

h.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 
Cohen  and^^^^^^^^^^and  any  payments  by^^^^|;o  Cohen. 

i.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  thefr 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

j.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 
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k.  Evidence  of  communications  involving  Michael  Cohen,  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howai'd  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

l.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

m.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  C^paigrT  about  the  Access  Hollywood  tape  and  other  potential  soTirces  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election, 

n.  Evidence  relating  to  any  reunbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

o.  Evidence  relating  to  Cohen’s  Icnowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

p.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 

relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 

q.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  natui-e  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  pmpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution, 

r.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

III.  Procedures  for  Searching  ESI 
A.  Execution  of  Warrant  for  ESI 

57.  Federal  Rule  of  Criminal  Procedure  4 1  (e)(2)(B)  provides  that  a  wamant  to  search 

for  and  seize  property  “may  authorize  the  seizure  of  electronic  storage  media  or  the  seizure  or 
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copying  of  electronically  stored  information  ...  for  later  review.”  Consistent  with  Rule  41,  this  c 

application  requests  authorization  to  seize  any  computer  devices  and  storage  media  and  transport 

them  to  an  appropriate  law  enforcement  facility  for  review.  This  is  typically  necessary  for  a  number  ^ 

of  reasons:  I 

8  First,  the  volume  of  data  on  computer  devices  and  storage  media  is  often  impractical 
for  law  enforcement  personnel  to  review  in  its  entirety  at  the  search  location. 

®  Second,  because  computer  data  is  particularly  vulnerable  to  inadvertent  or  intentional . .  . 

modificatiorTor  destruction,  computeFd^ices  ai-e  ideally^aminedln  a  conttolled  > 

environment,  such  as  a  law  enforcement  laboratory,  where  trained  personnel,  using  r 

specialized  software,  can  malce  a  forensic  copy  of  the  storage  tnedia  that  can  be  ^ 

subsequently  reviewed  in  a  manner  that  does  not  change  the  underlying  data.  I 

®  Thu-d,  there  are  so  many  types  of  computer  hardware  and  software  in  use  today  that  it  ^ 

can  be  impossible  to  bring  to  the  search  site  all  of  the  necessary  technical  manuals  and 
specialized  personnel  and  equipment  potentially  required  to  safely  access  the 
underlying  computer  data. 

•  Fourth,  many  factors  can  complicate  and  prolong  recovery  of  data  fi'otn  a  computer  , 

device’  including  the  increasingly  common  use  of  passwords,  encryption,  or  other 
features  or  configurations  designed  to  protect  or  conceal  data  on  the  computer,  which 
often  take  considerable  time  and  resources  for  forensic  personnel  to  detect  and  resolve. 

58.  As  discussed  herein,  Squire  Patton  Boggs  is  a  functioning  law  firm  that  conducts 
legitimate  business  unrelated  to  Cohen’s  commission  of  the  Subject  Offenses.  Subject  Premises-  | 

2  is  an  office  located  inside  of  Squire  Patton  Boggs’s  New  York  office.  In  order  to  execute  the 
warrant  in  the  most  reasonable  fashion,  law  enforcement  personnel  wiU  attempt  to  investigate  on 
the  scene  of  what  computers  or  storage  media,  if  any,  must  be  seized  or  copied,  and  what  computers 

or  storage  media  need  not  be  seized  or  copied.  Law  enforcement  pa-sonnel  will  speak  with  Squire 

Patton  Boggs  personnel  on  the  scene  as  may  be  appropriate  to  determine  which  files  and  electronic 
devices  within  Subject  Premises-2  belong  to  or  were  used  by  Cohen.  While,  based  on  the  i 

foregoing,  it  does  not  appear  that  Cohen  shared  electronic  devices  or  a  server  with  Squire  Patton  = 

Boggs,  where  appropriate,  law  enforcement  personnel  vdll  copy  data,  rather  than  physically  seize  j 
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computers,  to  reduce  the  extent  of  any  disruption  of  Squire  Patton  Boggs’s  operations.  If,  after 
inspecting  the  seized  computers  off-site,  it  is  determined  that  some  or  all  of  this  equipment  is  no 
longer  necessary  to  retrieve  and  preserve  the  evidence,  the  Government  will  return  it. 

59.  Additionally,  because  Cohen  is  an  attorney,  and  claims  to  serve  as  a  personal 
attorney  for  Trump,  the  review  of  evidence  seized  from  the  Subject  Premises  and  Subject  Devices 
will  be  conducted  pursuant  to  established  screening  procedures  to  ensure  that  the  law  enforcement 

in  amanner  reasonably  designed  to  protect  any  attorney-client  or  other  applicable  privilege.  When 
appropriate,  the  procedures  will  include  use  of  a  designated  “filter  team,”  separate  and  apart  from 
tiie  investigative  team,  in  order  to  review  potentially  privileged  communications  and  determine 
which  communications  to  release  to  the  investigation  and  prosecution  team. 

B.  Accessing  ESI  on  the  Subject  Devices 

60.  As  described  above,  the  Subject  Devices  are  both  Apple  brand  devices. 

61.  I  know  ftom  my  training  and  experience,  as  well  as  from  information  foimd  m 
pnbBcly  available  materials  ineluding  those  published  by  Apple,  that  some  models  of  Apple 
devices  such  as  iPhones  and  iPads  offer  their  users  the  ability  to  unlock  the  device  via  the  use  of  a 
fmgetprint  or  thumbprint  (collectively,  “fmgerprint”)  In  lieu  of  a  numeric  or  alphanumeric 
passcode  or  password.  This  feature  is  called  Touch  ID.  1  also  know  that  the  Apple  iPhone  X  offers 
its  users  the  ability  to  unlock  the  device  via  the  use  of  facial  recognition  (through  Inliared  and 
visible  light  scans)  in  lieu  of  a  numeric  or  alphanumeric  passcode  or  password.  This  feature  is 

called  Face  ID. 

62.  If  a  user  enables  Touch  ID  on  a  given  Apple  device,  he  or  she  can  register  up  to  5 
fingerprints  that  can  be  used  to  unlock  that  device.  The  user  can  then  use  any  of  the  registered 
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fingerprints  to  unlock  the  device  by  pressing  the  relevant  finger(s)  to  the  device’s  Touch  ID  sensor, 
which  is  found  in  the  round  button  (often  refened  to  as  the  “home”  button)  found  at  the  bottom 
center  of  the  front  of  the  device.  If  a  user  enables  Face  ID  on  a  given  Apple  device,  he  or  she  can 
imlock  the  device  by  raising  the  iPhone  to  his  or  her  face,  or  tapping  the  screen.  In  my  training 
and  experience,  users  of  Apple  devices  that  offer  Touch  ID  or  Face  ID  often  enable  it  because  it  is 
considered  to  be  a  more  convenient  way  to  unlock  the  device  than  by  entering  a  numeric  or 
alphanumeric  passcode  or  password,  as  well  as  a  more  secure  way  to  protect  the  device’s  contents. 

63 .  fri  some  circmnstances.  Touch  ID  or  Face  ID  cannot  be  used  to  unlock  a  device  that 
has  either  security  feature  enabled,  and  a  passcode  or  password  must  be  used  instead.  These 
circumstances  include:  (1)  when  the  device  has  just  been  turned  on  or  restarted;  (2)  when  more 
than  48  hours  has  passed  since  the  last  time  the  device  was  unlocked;  (3)  when  the  passcode  or 
password  has  not  been  entered  in  the  last  6  days,  and  the  device  has  not  been  unlocked  via  Touch 
ID  in  the  last  8  hours  or  the  device  has  not  been  unlocked  via  Face  ID  in  the  last  4  hours;  (4)  the 
device  has  received  a  remote  lock  command;  or  (5)  five  unsuccessful  attempts  to  unlock  the  device 
via  Touch  ID  or  Face  ID  are  made. 

64.  The  passcodes  or  passwords  that  would  unlock  the  Subject  Devices  are  not  Icnown 
to  law  enforcement.  Thus,  it  will  likely  be  necessaiy  to  press  the  fingers  of  the  user  of  the  Subject 
Devices  to  the  devices’  Touch  ID  sensor,  or  hold  the  Subject  Devices  in  fi'ont  of  the  user’s  face  to 
activate  the  Face  ID  sensor,  in  an  attempt  to  unlock  the  devices  for  the  purpose  of  executing  the 
search  authorized  by  this  warrant.  Attempting  to  unlock  the  relevant  Apple  devices  via  Touch  ID 
with  the  use  of  the  fingerprints  of  the  user,  or  via  Face  ID  by  holding  the  device  in  front  of  the 
user’s  face,  is  necessary  because  the  government  may  not  otherwise  be  able  to  access  the  data 
contained  on  those  devices  for  the  purpose  of  executing  the  search  authorized  by  this  warrant. 
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65.  Based  on  these  facts  and  my  training  and  experience,  it  is  likely  that  Cohen  is  the 
user  of  the  Subject  Devices,  and  thus  that  his  fingerprints  are  among  those  that  are  able  to  unlock 
the  Subject  Devices  via  Touch  ID  or  his  face  is  able  to  unlock  the  Subject  Devices  via  Face  ID. 

66.  Although  I  do  not  loiow  which  of  a  given  user’s  10  fingerprints  is  capable  of 
unlocking  a  particular  device,  based  on  my  training  and  experience  I  know  that  it  is  common  for  a 
user  to  unlock  a  Touch  ID-enabled  Apple  device  via  the  fingerprints  on  thumbs  or  index  fingers. 
TrTthe  evenflhat  law  enfofceinehf  is  unable  to  unlock  the  Subject  Devices  as  described  above 
within  the  five  attempts  permitted  by  Touch  ID,  this  will  simply  result  in  the  device  requiring  the 
entry  of  a  password  or  passcode  before  it  can  be  unlocked. 

67.  I  also  know  from  my  training  and  experience,  and  my  review  of  publicly  available 
materials  published  by  Apple  that  Apple  brand  devices,  such  as  the  Subject  Devices,  have  a  feature 
that  allows  a  user  to  erase  the  contents  of  the  device  remotely.  By  logging  into  the  Internet,  the 
user  or  any  other  indiAudual  who  possesses  the  user’s  account  information  can  take  steps  to 
completely  wipe  the  contents  of  the  device,  thereby  destroying  evidence  of  criminal  conduct,  along 
with  any  other  information  on  the  device.  The  only  means  to  prevent  this  action  is  to  disable  the 
device’s  ability  to  connect  to  the  Internet  immediately  upon  seizure,  which  requires  either  access 
to  the  device  itself  to  alter  the  settings,  or  the  use  of  specialized  equipment  that  is  not  consistently 
available  to  law  enforcement  agents  at  every  arrest. 

68.  Due  to  the  foregoing,  I  request  that  the  Court  authorize  law  enforcement  to  press 
the  fingers  (including  thumbs)  of  Cohen  to  the  Touch  ID  sensors  the  Subject  Devices,  or  hold  the 
Subject  Devices  in  front  of  Cohen’s  face,  for  the  purpose  of  attempting  to  unlock  the  Subject 
Devices  via  Touch  ID  or  Face  ID  in  order  to  search  the  contents  as  authorized  by  this  warrant. 
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C.  Review  of  ESI 

69.  FolloAving  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation 

of  forensic  image  copies,  law  enforcement  personnel  (including,  in  addition  to  law  enforcement 
officers  and  agents,  and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and 
related  proceedings,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel 
assisting  the  government  in  this  investigation,  and  outside  technical  experts  under  government 
^nffol)^iil^eview“the  ESI“c6ntamed  tKefeiirfor  infortmtion  responsive  to  the  waffantr  ^ 

70.  In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques 
to  determine  which  files  or  other  ESI  contain  evidence  or  fruits  of  the  Subject  Offenses.  Such 
techniques  may  include,  for  example: 

•  surveying  directories  or  folders  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

»  conducting  a  file-by-file  review  by  “opening”  or  reading  the  first  few  “pages”  of  such 
files  in  order  to  determine  their  precise  contents  (analogous  to  performing  a  cursory 
examination  of  each  document  in  a  file  cabinet  to  determine  its  relevance); 

•  “scanning”  storage  areas  to  discover  and  possibly  recover  recently  deleted  data  or 
deliberately  hidden  files;  and 

•  performing  electronic  keyword  searches  through  all  electronic  storage  areas  to 
determine  the  existence  and  location  of  data  potentially  related  to  the  subject  matter  of 
the  investigation^'^;  and 

«  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 


Keyword  searches  alone  are  typically  inadequate  to  detect  all  relevant  data.  For  one  thing, 
keyword  searches  work  only  for  text  data,  yet  many  types  of  files,  such  as  images  and  videos,  do 
not  store  data  as  searchable  text.  Moreover,  even  as  to  text  data,  there  may  be  information  properly 
subject  to  seizure  but  that  is  not  captured  by  a  keyword  search  because  the  information  does  not 
contain  the  keywords  being  searched. 
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71 .  Law  enforcement  personnel  will  make  reasonable  efforts  to  restrict  their  search  to 
data  falling  within  the  categories  of  evidence  specified  in  the  warrant.  Depending  on  the 
circumstances,  however,  law  enforcement  personnel  may  need  to  conduct  a  complete  review  of  all 
the  ESI  from  seized  devices  or  storage  media  to  evaluate  its  contents  and  to  locate  all  data 

responsive  to  the  warrant. 

D.  Return  of  ESI 

ll.  IftteGOTmnnmtdSerTnines'tl^^ 

to  retrieve  and  preserve  the  data,  and  the  devices  themselves  are  not  subject  to  seizure  pursuant  to 
Federal  Rule  of  Criminal  Procedure  41(c),  the  Government  will  return  these  items,  upon  request. 
Computer  data  that  is  encrypted  or  um-eadable  will  not  be  returned  unless  law  enforcement 
personnel  have  determined  that  the  data  is  not  (i)  an  instrumentality  of  the  offense,  (ii)  a  fruit  of 
the  criminal  activity,  (iii)  contraband,  (iv)  othemise  unlawfiilly  possessed,  or  (v)  evidence  of  the 

Subject  Offenses. 
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IV.  Conclusion  and  Ancillary  Provisions 

73.  on  the  foregoing,  I  respectfully  request  the  court  to  issue  a  warrant  to  seize 
the  items  and  information  specified  in  Attachments  A,  B,  C,  D,  E  and  F  to  this  affidavit  and  to  the 
Search  and  Seizui-e  Warrants. 

74.  In  light  of  the  eonfldential  nature  of  the  continuing  investigation,  I  respectfully 
request  that  this  affidavit  and  all  papers  submitted  herewith  be  maintained  under  seal  until  the 

Court  orders  otherwise. 


/ 


Special  Agent 
FBI 


Sworn  to  before  me  on  ^ 

8th  day  of  April.  2018  /}■/  /  tS  •  -2 


i  .n  s  /  r 


uterED  §f ATBS  JUDGE 
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ATTACHMENT  A 

I,  Premises  to  be  Searched — Subject  Premises-! 

The  premises  to  be  searched  (“Subject  Premises-l”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein. 

Apartment  Hlocated  inside  the  building  at  502  Park  Avenue,  New  York,  New  York 
10022.  The  building  located  at  502  Park  Avenue  is  a  32-floor  brick  residential  building.  Subject 
Premises-1  is  located  on  the  the  building. 


n.  Items  to  Be  Seized 


A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  fi-om  Subject  Premises-1  ai'e  evidence,  fiiiits,  and  hisflumentalities 
of  violations  of  18  U.S.C.  §§  371  (consphacy,  as  it  pertains  to  the  other  Subject  Offenses)  1005 
(false  bank  entiies),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows; 


a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallionSj  fiom  Januaiy  1, 2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agi'eement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  ^^^^^^^|md/or  entities  associated  with  hun. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  pmpose  of  payments  made  to  or  from  Essential  Consultants  or  the  natoe 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 


e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 


f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalent^ 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  throug 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  , 
2013  to  the  present. 


g.  Evidence  relating  to  agieements,  loans,  and/or  financial  transaction^e^re^ 
Cohen  controlled  by  the^^^^H^I 
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and  any  payments  by  January 

1,  2012  to  the  present. 

h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephame  Clifford  or  Karen  McDougal. 

i  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  DylatTHoWd^bW  Donald  Trmnprthe^Trum 
Clifford,  and/or  Kai-en  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

1  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  *e 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Tramp’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  c^paign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 


o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  banlc  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p  Communications,  records,  documents,  and  other  files  reflectmg  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  ^ 

that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  ^t  a 

financial  institution;  the  source  of  fimds  flowing  into  an  account;  or  the 
financial  transactions  involving  that  financial  institution,  from  January  1, 2013  to  the  present. 


q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 


B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-1  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categones 
set  forth  in  Section  n.A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  fto 
any  other  deslctop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartp 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  waiTant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-1  also  include; 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similai-  mformation. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  mformation 

concerning  the  configuration  of  the  seized  or-Gopiedcomputeivdevices-Oi^storage„media^ - _ — 

3  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 


C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  m  additiM  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staf^  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  ai  e  authorized  to  review  the  ESI  contained  therein  for  information  responsive 

to  the  wan'ant. 


In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  foi  example. 

•  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  openmg  a  drawer 
believed  to  contain  pertinent  files); 

.  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

8  scanning  storage  ai-eas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

®  performing  key  word  searches  thi'ough  all  electronic  storage  areas  to  determine  whether 
occuiTences  of  language  contained  in  such  storage  ai'eas  exist  that  ai'e  mtimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  infoimation  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
n.A  and  II.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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ATTACHMENT  B 


I.  Premises  to  be  Searched — Subject  Premises-2 


1  u  A  ('“CnViippf  Premises-!”')  are  described  as  follows,  and  include 

The  premises  to  be  searched  (  Subject  Premises  z  j  aic 

electronic  devices,  and  all  locked  and  closed  contamers  found  therem. 
that  spans  the  entire  block  between  Sixth  Avenue  and  Rockefeller  Plaza. 


II.  Items  to  Be  Seized 

A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  iteiTB  to  be  seized  from  Subject  Premises-2  are 

of  yioWtons  “f,**  statemeL  to'^  financial  institution),  1343  (wire  fraud),  and  1344 

"«d  52  uic  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (Illegal  eampatgn 
OTtiibutlons)  (the  “Subject  Offenses")  described  as  follows: 

a.  Evidence  relating  to  Sterling  Nationai  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1 , 20 1 3  to  the  present. 

b  Evidence  relating  to  a  plan,  proposal,  or  agreement  or 

enfrties  associated  with  hta  to  4th  him. 

liabilities,  to  others,  including  to 

0.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Mehose. 

d  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates, 

•  1  1  +/X  PriVipn’*;  net  wolth  available  cash  and  cash  equivalents, 

-“omTS  JLna^l 

2013  to  the  present. 

a  Evidence  relating  to  agreements,  loans,  and/or  fmaneial  traj|g|j^|||j> 

entities  controlled  by 

Cohen 
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and  any  payments  by  Cohen,  from  Januaiy 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  oi 
payments  to  Stephanie  Clifford  or  Kai'en  McDougal. 

_ j  Kvidp:Tir,R  of  pnmmnnications  between  Michael  Cohen  and  American  Media,  Inc., 

David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Tramp  Campaign  about  the  Access  Hollywood  tape  and  otW  potential  sources  of  negative 
publicity  involving  Tramp’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 

p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-2  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  felling  within  the  categories 
set  forth  in  Section  11. A  of  this  Attachment  above,  including,  but  not  limited  to,  any  desktop  and 
laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone  belonging  to  Michael  Cohen 


1, 2012  to  the  present. 
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or  in  his  possession,  portable  hard  drives,  disk  diives,  thumb  drives,  md  personal  digital  assistants. 
In  lieu  of  seizing  any  such  computer  devices  or  storage  media,  this  warrant  also  authorizes  the 
copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-2  also  include: 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  ^y  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  softwai'e  manuals  or  other  ^mformation 

“^on^ing  the  cdKfiguratiMTbffhe  seized  m^'opM  computer  devices  or  storage^^m 

3 .  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 


C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  m  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  mformation  responsive 

to  the  waiTant. 


In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  waivant,  including,  for  example: 


•  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  atthe  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

»  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determme 
their  precise  contents; 

®  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

»  performing  key  word  searches  thi'ough  all  electronic  storage  areas  to  determine  whethei 
occmTences  of  language  contained  in  such  storage  areas  exist  that  are  intunately  related 
to  the  subject  matter  of  the  investigation;  and 

»  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
n.A  and  II-B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  fiom  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  waiTant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  fiom  the  investigative  team,  in  order  to  address 
potential  privileges. 
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ATTACHMENT  C 


I,  Premises  to  be  Searched — Subject  Premises-S 

The  premises  to  be  searched  (“Subject  Premises-3”)  are  described  as  follows,  and  include 
all  locked  and  closed  containers  found  therein: 

A  safe  deposit  box  located  inside  tMp  Bank  branch  location  at  500  Park  Avenue,  New 
York,  New  York  10019,  marked  as  box  The  safe  deposit  box  is  in  the  name  of  Michael 

Cohen  and  Laura  Cohen. 


TT-  Items  to  Be  Seized 


A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  fi’om  Subject  Premises-3  are  evidence,  fraits,  ^d  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other  Subject  Offenses)  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wue  fraud),  and  1344 
(banlc  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows. 


1  Evidence  relating  to  Michael  Cohen’s  net  worth,  available  cash  and  cash 
equivalents,  assets,  montlily  and  annual  income,  and  income  sources,  fi-om  January  1, 2013  to  the 
present. 

2.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  then- 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

3.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Tmmp  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

4.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephame 
Clifford,  and/or  Karen  McDougal. 


5.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 


6  Evidence  of  communications  with  Donald  Tmmp  and/or  agents  or  associates  of  the 

Tmmp  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

7.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 
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8.  Evidence  relating  to  Cohen’s  Icnowledge  of  the  c^paign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

9.  Any  portable  elecbonic  storage  device. 

B.  Search  of  Seized  Electronic  Devices 

Probable  cause  exists  to  search  any  seized  elecbonic  storage  device  for  the  items  set 


forth  in  Section  II(A)(l)-(8),  above. 


C.  Review  of  ESI 


Following  seizure  of  any  electronic  storage  device,  law  enforcement  personnel  (which  may 
include  in  addition  to  law  enforcement  officers  and  agents,  attorneys  for  the  government,  attorney 
support  staff,  agency  personnel  assisting  the  government  in  this  mvestigation,  ^d  ou  si  e 
teckiical  experts  under  government  control)  are  authorized  to  review  the  ESI  contained  therem  for 
information  responsive  to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example. 


«  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looldng  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 


.  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

*  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 


•  performing  key  word  searches  through  all  electronic  storage  areas  to  determme  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  mtimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 


Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  m  Sectmns 
11 A  and  II.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authoiized  to  eonduc 
a  complete  review  of  all  the  ESI  from  seized  devices  if  necessary  to  evaluate  its  contents  and  to 
loeate  all  data  responsive  to  the  warrant. 


Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
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any  attorney-client  oi’  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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ATTACHMENT  D 

L  Premises  to  be  Searched — Subject  Premises-4 

The  premises  to  be  searched  (“Subject  Premises-4”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein. 

Room  1728  located  inside  the  Loews  Regency  Hotel  at  540  Park  Avenue,  New  York,  New 
York  10065.  The  building  is  a  luxury  hotel  located  on  Park  Avenue  and  61st  Street.  Subject 
Premises-4  is  located  on  the  17th  floor  of  the  hotel. 

n.  Items  to  Be  Seized  _ _  _ _ _ _ ^ 

A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from  Subject  Premises-4  are  evidence,  fi-uits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fi-aud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 

b.  Ewdence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  trans^^nWnto^in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to^^^^^^^^nd/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nafru'e 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  Associates. 

f  Ewdence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
2013  to  the  present. 

g.  Evidence  relating  to  agreements,  loans,  and/or  financial  Imisaction^etw^ 
Cohen  controlled  by 
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land  any  payments  by  I 


|to  Cohen,  from  January 


1, 2012  to  the  present. 

h  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  an^or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 


David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

1  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  eonnection  with  the  eleetion. 

n.  Evidence  relating  to  Cohen’s  Icnowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requhements,  and  campaign  confribution  hmits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  an^or  other  accomtaiits, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 

p  Communications,  records,  documents,  and  other  files  reflectmg  false 
representations  to  a  financial  institution  related  to  the  intended 

that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 

financial  institution;  the  source  of  flmds  flowing  mto  an  account;  or  the 

financial  fransactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  he  seized  from  Subject  Pi-emises-4  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  fallmg  within  the  ^ategones 
set  forth  in  Section  n.A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBoi^  , 
any  other  desktop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  latei  review. 

The  items  to  be  seized  from  Subject  Premises-4  also  include: 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  enci'yption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  mformation 

concemingThe  configuratimTofthe^i^d  of'copiedwmputer  devices  orstorage  mediar 

3.  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C,  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  ftierein  for  information  responsive 
to  the  warrant. 


In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  wairant,  including,  for  example: 

•  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looldng  at  the  outside  of  a  file  cabinet  for  the  maikings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

®  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  deteiTnine 
their  precise  contents; 

®  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

e  performing  key  word  searches  thi-ough  all  electronic  storage  areas  to  determine  whether 
oceurrenees  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

»  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
n,A  and  n.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  fi-om  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  wanunt. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attomey-chent  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  ifom  the  investigative  team,  in  order  to 
address  potential  privileges. 
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ATTACHMENT  E 

I.  Device  Subject  to  Search  and  Seizure  -  Subject  Device-1 

The  device  that  is  the  subject  of  this  search  and  seizure  warrant  (“Subject  Device-1”)  is 
described  as  follows: 

An  Apple  iPhone  seiwiced  by  AT&T  with  the  telephone  numbe 

During  the  execution  of  this  search  warrant,  law  enforcement  personnel  are  autliorized  to 
depress  the  fingerprints  and/or  thumbprints  of  Michael  Cohen  onto  the  Touch  ID  sensor  of  Subject 
Device-1,  or  hold  Subject  Device-1  in  fiont  of  Cohen’s  face  to  activate  the  Face  ID  sensor,  in  order 
to  gain  access  tbfhe  contents  of  any^uchlievice“as^thorizM  by  this  waiTanf 


n.  Review  of  ESI  on  the  Subject  Device 

Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and  agents, 
and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and  related  proceedings, 
attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the  government  in 
this  investigation,  and  outside  technical  experts  under  government  control)  are  authorized  to 
review  the  ESI  contained  on  Subject  Device-1  for  evidence,  fruits,  and  instrumentalities  of 
violations  of  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other  Subject  Offenses),  1005  (false 
bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fi-aud),  and  1344  (bank 
fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contiibutions) 
(the  “Subject  Offenses”)  described  as  follows: 


a.  Evidence  relating  to  Sterling  National  Banlc,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 


b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 


liabilities,  to  others,  including  to  I 


land/or  entities  associated  witli  him. 


c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 


d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  or 
communications  that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential 
Consultants  or  the  nature  of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with 
Essential  Consultants. 


e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
or  communications  that  indicate  the  natur  e  and  purpose  of  payments  made  to  or  from  Michael  D. 
Cohen  &  Associates,  or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D. 
Cohen  &  Associates. 
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f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  Januaiy  1, 
2013  to  the  present. 

g.  Evidence  relating  to  agreements,  loans,  and/or  financial 

Cohen  entitiesconfrolledby 

and  any  payments  by  Cohen,  from  January 

1,  2012  to  the  present. 

h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 

agents  or4egahrepresentatives,Jncludingjny.nondisclosure  agreement  and  related  ^ 

and  any  communications  related  to  such  agreements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Tmmp  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  fric., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Tmmp  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Tmmp’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  Icnowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Commimications  with  others,  including  Jeffrey  Getzel  and/or  other  accountante, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 

p.  Commimications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 
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If  the  Government  determines  that  Subject  Device-1  is  no  longer  necessary  to  retrieve  and 
preserve  the  data  on  the  device,  and  that  Subject  Device-1  is  not  subject  to  seizure  pursuant  to 
Federal  Rule  of  Q-iminal  Procedure  41(c),  the  Government  will  return  Subject  Device-1,  upon 

request. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  m  order  to  address 

potential  privileges. 
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ATTACHMENT  F 


L  Device  Subject  to  Search  and  Seizure  -  Subject  Device-2 

The  device  that  is  the  subject  of  this  search  and  seizure  warrant  (“Subject  Device-2”)  is 
described  as  follows: 

An  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number| 


Duiing  the  execution  of  this  search  warrant,  law  enforcement  personnel  are  authorized  to 
depress  the  fingerprints  and/or  thumbprints  of  Michael  Cohen  onto  the  Touch  ID  sensor  of  Subject 
Device-2,  or  hold  Subject  Device-2  in  front  of  Cohen’s  face  to  activate  the  Face  ID  sensor,  in  order 
to  gain  access  to  the  contents  of  any  such  device  as  authorized  bylHis  warrant. 

n.  Review  of  ESI  on  the  Subject  Device 


Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and  agents, 
and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and  related  proceedings, 
attorneys  for  the  government,  attorney  support  staff,  agency  persoimel  assisting  the  government  in 
this  investigation,  and  outside  technical  experts  under  government  control)  are  authorized  to 
review  the  ESI  contained  on  Subject  Device-2  for  evidence,  fruits,  and  instrumentalities  of 
violations  of  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other  Subject  Offenses),  1005  (false 
bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344  (banlc 
fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions) 
(the  “Subject  Offenses”)  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Banlc,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 


b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  trm^N^i^nto^  in  taxi  medallions,  and  any  associated  debts  or 


liabilities,  to  others,  including  to  | 


land/or  entities  associated  with  him. 


c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 


d.  Evidence  relating  to  Essential  Consultants,  EEC,  including  any  documents  or 
communications  that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential 
Consultants  or  the  nature  of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with 
Essential  Consultants. 


e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
or  communications  that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D. 
Cohen  &  Associates,  or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D. 
Cohen  &  Associates. 
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f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  soui'ces,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  banlc  records,  from  Januaiy  1, 
2013  to  the  present. 


Cohen  and 


^^Evidenc^relatin^^aereemmts,  loans,  and/or  financial  tonsactimi^be^e^ 


|and/or  entities  controlled  by| 
land  any  payments  by  Cohen,  from  January 


1,  /ui/  TO  me  presem. 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 

agents  or  legahrepresentatives,  including- any_nondisclosure  agreements_and_related  documQlts,. 
and  any  communications  related  to  such  agreements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Tmmp  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 


k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 


l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Tnimp  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 

p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  accoimt  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1, 2013  to  the  present. 


2017.08.02 


21 


Case  l:18-cr-00602-WHP  Document  48-1  Filed  07/18/19  Page  102  of  269 


.fmeGovenune„tde^mi„es«S„ye«» 

S"  »  41(0).  thi  Gove,™t  will  return  Subject  Device-2,  upon 

request. 

potential  privileges. 
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AO  106  (Rev.  06/09)  Application  for  a  Search  Warrant 

United  States  District  Court 

for  the 

Southern  District  of  New  York 


In  the.  Matter  of  the  Search  of  ^ 

(Briefly  describe  the  property  to  be  searched  ) 

or  identify  the  person  by  name  and  address)  ^  Case  No. 

Four  Premises  and  Two  Electronic  Devices,  See  ) 

Attached  Affidavit  and  Riders  j 

APPLICATION  FOR  A  SEARCH  WARRANT 

I,  a  federal  law  enforcement  officer  or  an  attorney  for  the  government,  request  a  search  warrant  and  state  under 
penalty  of  perjury  that  1  have  reason  to  believe  that  on  the  following  person  or  property  (identfy  the  person  or  describe  the 

^m7tefses  anlfl^^^  See  Attached  Affidavit  and  Riders 

located  in  the  Southern  District  of _ New  York _ ,  there  is  now  concealed  (identify  the 

person  or  describe  the  property  to  he  seized)'. 

PLEASE  SEE  ATTACHED  AFFIDAVIT  AND  RIDERS. 

The  basis  for  the  search  under  Fed.  R.  Crim.  P.  4 1  (c)  is  (check  one  or  more)'. 
sf  evidence  of  a  crime; 

sf  contraband,  fruits  of  crime,  or  other  items  illegally  possessed; 
sT property  designed  for  use,  intended  for  use,  or  used  in  committing  a  crime; 

□  a  person  to  be  arrested  or  a  person  who  is  unlawfully  restrained. 

The  search  is  related  to  a  violation  of: 

Code  Section  Offense  Description 

18  U.S.C.  s  371, 1005,  1014,  Conspiracy,  false  bank  entries,  false  statements  to  a  financial  institution, 

1343  and  1344,  and  wire  fraud,  bank  fraud,  and 

52  use  30116  and  30109  illegal  campaign  contributions 

The  application  is  based  on  these  facts: 

PLEASE  SEE  ATTACHED  AFFIDAVIT  AND  RIDER. 

sT  Continued  on  the  attached  sheet. 

□  Delayed  notice  of _ days  (give  exact  ending  date  if  more  than  30  days: _ )  is  requested 

under  1 8  U.S.C.  §  3103a,  the  basis  of  which  is  set  forth  on  the  attached  sheet. 


Printed  name  and  title 


Sworn  to  before  me  and  signed  in  my  presence. 


Date:  04/08/2018 


City  and  state: 


j\dge 's  signature 

Hon.  Henry  B.  Pitman,  U.S.  Magistrate  Judge 

Printed  name  and  title 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  the  Application  of  the  United 
States  of  America  for  a  Search  and  Seizure 
Warrant  for  the  Premises  Known  and  Described 
as  (1)  502  Park  Avenue, 

York,  New  York  10022,  (2)  Michael  Cohen’s 
Office  at  30  Rockefeller  Plaza,  23rd  Floor,  New 
l^’-k,  New  York  101 12,  (3)  Safe  Deposit  Box  # 
^(Located  at  the  TD  Bank  Branch  at  500  Park 
Avenue,  New  York,  New  York  10019,  and  (4) 

TO  BE  FILED  UNDER  SEAL 

Agent  Affidavit  in  Support  of 

Application  for  Search  and  Seizure 

Warrant 

Loews  Regency  Hotel,  540  Park  Avenue,  Room 
1728,  New  York,  New  York  10065,  and  Any 
Closed  Containers/Items  Contained  Therein,  and 
the  Electronic  Devices  Known  and  Described  as 

iPhone  with  Phone  Number 
^Hl^land  (2)  an  Apple  iPhone  with  Phone 

Reference  No.  2018R00127 


SOUTHERN  DISTRICT  OF  NEW  YORK)  ss.: 


Special  Agent,  Federal  Bureau  of  Investigation,  being  duly  sworn, 


deposes  and  says: 

I.  Introduction 
A.  Affiant 

1 .  I  am  a  Special  Agent  with  the  Federal  Bureau  of  Investigation  (“FBI”).  I  have  been 
a  Special  Agent  with  the  FBI  since  2009.  In  the  course  of  my  experience  and  training  in  these 
positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a  wide  array 


of  financial  crimes,  including  frauds  on  financial  institutions,  as  well  as  into  offenses  involving 
public  corruption.  I  also  have  training  and  experience  executing  search  warrants,  includmg  those 


involving  electronic  evidence. 

2.  I  make  this  Affidavit  in  support  of  an  application  pursuant  to  Rule  41  of  the  Federal 

Rules  of  Criminal  Procedure  for  a  warrant  to  search  the  premises  specified  below  (the  “Subject 


2017.08.02 


2 


Case  l:18-cr-00602-WHP  Document  48-1  Filed  07/18/19  Page  105  of  269 


Premises”)  and  the  electronic  devices  specified  below  (the  “Subject  Devices”)  for,  and  to  seize, 
the  items  and  information  described  in  Attachments  A,  B,  C,  D,  E  and  F.  This  affidavit  is  based 
upon  my  personal  knowledge;  my  review  of  documents  and  other  evidence;  my  conversations  with 
other  law  enforcement  personnel;  and  my  training,  experience  and  advice  received  concerning  the 
use  of  electronic  devices  in  criminal  activity  and  the  forensic  analysis  of  electronically  stored 
information  (“ESI”).  Because  this  affidavit  is  being  submitted  for  the  limited  purpose  of 
establishing  probable  cause,  it  does  not  include  all  the  facts  that  Thave  learned  during  the  course 
of  my  investigation.  Where  the  contents  of  documents  and  the  actions,  statements,  and 
conversations  of  others  are  reported  herein,  they  are  reported  in  substance  and  in  part,  except  where 
otherwise  indicated. 

B.  The  Subject  Premises  and  Subject  Devices 

3.  Subject  Premises-1 ,  Subject  Premises-2,  Subject  Premises-3  and  Subject  Premises- 

4  (collectively,  the  “Subject  Premises”)  are  particularly  described  as: 

a.  Subject  Premises-1  is  Apartment  ^^^located  inside  the  building  at  502 
Park  Avenue,  New  York,  New  York  10022.  The  building  located  at  502  Park  Avenue  is  a  32- 
floor  brick  residential  building.  Subject  Premises-1  is  located  on  the^^|floor  of  the  building. 
Based  on  my  review  of  New  York  City  property  records,  I  have  learned  that  Michael  Cohen  and 
Laura  Cohen  own  Subject  Premises-1.^  Additionally,  as  described  below.  Subject  Premises-1  is 
Cohen’s  full-time  residence. 

b.  Subject  Premises-2  is  an  office  located  on  the  23rd  floor  of  the  building  at 
30  Rockefeller  Plaza,  New  York,  New  York  101 12.  The  building  located  at  30  Rockefeller  Plaza 


1  As  noted  infra,  I  have  learned  that  on  or  about  October  28,  2015,  Cohen  transferred  Subject 
Premises-1  into  a  trust. 
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is  a  66-floor  office  building  that  spans  the  entire  block  between  Sixth  Avenue  and  Rockefeller 
Plaza.  Subject  Premises-2  is  located  on  the  23rd  floor  of  the  building  inside  of  the  offices  of  the 
law  firm  Squire  Patton  Boggs.  The  office  is  assigned  to  Michael  Cohen.  As  described  below, 
Michael  Cohen  works  and  conducts  meetings  at  Subject  Premises-2. 

c.  Subject  Premises-3  is  a  safety  deposit  box  located  inside  the  TD  Bank 
branch  location  at  500  Park  Avenue,  New  York,  New  York  10019.  Based  on  my  review  of  records 

maintained^TD  BankJ  have  learned  th^  th7^^de^ifboYis¥ppdxifmtely  five^^^ 

ten  inches  in  size,  and  is  marked  as  box^|  The  safety  deposit  box  is  in  the  name  of  Michael 
Cohen  and  Laura  Cohen. 

d.  Subject  Premises-4  is  Room  1 728  located  inside  the  Loews  Regency  Hotel 
at  540  Park  Avenue,  New  York,  New  York  10065.  The  building  is  a  luxury  hotel  located  on  Park 
Avenue  and  61st  Street.  Subject  Premises-4  is  located  on  the  17th  floor  of  the  hotel.  Based  on  my 
review  of  emails  obtained  pursuant  to  search  warrants  described  below,  I  have  learned  that  on  or 
about  January  5,  2018,  Cohen  received  an  email  from  an  employee  of  Loews  Regency,  which 
included  a  price  quote  for  a  long-term  stay  suite  based  on  a  three-month  stay  from  January  8  to 
April  8, 20 1 8.2  On  or  about  January  29, 20 1 8,  Cohen  sent  an  email  to  a  Loews  Regency  employee, 
stating,  in  pertinent  part:  “I  just  spoke  to  my  wife  and  she  has  scheduled  the  move  for  Thursday. 
Please  mark  down  that  we  will  be  taking  possession  on  Thursday,  February  1st.  Based  on  my 
review  of  cell  phone  location  data,  I  have  learned  that,  over  the  past  24  hours,  two  cellular  phones 
used  by  Cohen  have  been  located  in  the  vicinity  of  Subject  Premises-4.  In  particular,  on  or  about 


2  Although  the  quoted  price  contemplated  a  three-month  stay  from  Januaiy  8  to  April  8,  it  appears 
that  Cohen  did  not  move  in  until  February  1,  and  as  of  today,  April  8,  cellphone  location 
information  demonstrates  that  Cohen’s  cellular  phones  are  in  still  in  the  vicinity  of  Subject 
Premises-4. 

4 
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April  8,  2018,  law  enforcement  agents  using  a  “triggerfish”  device  identified  Room  1728  as  the 
room  within  the  hotel  in  which  the  Subject  Devices  are  most  likely  present^ 

e.  Therefore,  I  believe  that  Cohen  is  temporarily  residing  in  Subject 


Premises-4. 

4.  Subject  Device-1  and  Subject  Device-2  (collectively,  the  “Subject  Devices”)  are 


particularly  described  as: 

a.  Subject  Device-TTs  an  Apple  iPhbhe“  serviced  byA^T&T  witRthe^telephone  number 
Based  on  my  review  of  records  maintained  by  AT&T,  I  have  learned  that  Subject 
Device-1  is  subscribed  to  Michael  Cohen.  Based  on  my  review  of  cellphone  location  information 


maintained  by  AT&T,  I  have  learned  that  Subject  Device-1  is  presently  located  m  the  Southern 


District  of  New  York. 

b.  Subject  Device-2  is  an  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number 

Based  on  my  review  of  records  maintained  by  AT&T,  I  have  learned  that  Subject 
Device-2  is  subscribed  to  Michael  Cohen.  Based  on  my  review  of  cellphone  location  information 
maintained  by  AT&T,  I  have  learned  that  Subject  Device-2  is  presently  located  m  the  Southern 

District  of  New  York. 

c.  Based  on  my  training,  experience,  and  research,  and  from  consulting  the 
manufacturer’s  and  service  providers’  advertisements  and  product  technical  specifications 
available  online,  I  know  that  the  Subject  Devices  have  capabilities  that  allow  them  to,  among  other 
things:  make  and  receive  telephone  calls;  save  and  store  contact  information;  send  and  receive 


^  Based  on  my  conversations  with  these  agents,  I  understand  that  it  is  also  possible  that  the  Subject 
Devices  are  one  floor  below,  in  Room  1628.  However,  as  noted,  I  understand  that  Cohen  received 
a  price  quote  for  a  long-term  stay  suite  and  is  residing  there  with  his  family.  Based  on  my 
conversations  with  FBI  agents  conducting  surveillance,  I  understand  that  Room  1728  appears  to 
be  a  suite,  whereas  Room  1628  appears  to  be  a  standard  room. 

5' 
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emails  and  text  messages;  download  and  run  mobile  telephone  applications,  including  encrypted 
call  and  messaging  application  such  as  WhatsApp,  Signal,  and  Dust;  take,  send,  and  receive 
pictures  and  videos;  save  and  store  notes  and  passwords;  and  store  documents. 

C.  The  Subject  Offenses 

5 .  For  the  reasons  detailed  below,  I  believe  that  there  is  probable  cause  to  believe  that 
the  Subject  Premises  and  Subject  Devices  contain  evidence,  fruits,  and  instrumentalities  of 

violations  of  18  U.S.C.  §§  lOOS^/false^bahk  enfries)7"1014  (false  statementsAo  a  fmanciaP- 

institution),  1343  (wire  fraud),  and  1344  (bank  fraud)  (collectively,  the  “Bank  Fraud  Offenses”), 
52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions)  (the 
“Campaign  Finance  Offenses”),  and  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  Other- 
Subject  Offenses)  (collectively,  the  “Subject  Offenses”). 

D.  Prior  Applications 

6.  The  FBI  and  the  United  States  Attorney’s  Office  for  the  Southern  District  of  New 
York  (“USAO”)  have  been  investigating  several  courses  of  criminal  conduct  by  Michael  Cohen. 
Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President  Donald 
Trump,  and  who  previously  served  for  over  a  decade  as  an  executive  in  the  Trump  Organization, 
an  international  conglomerate  with  real  estate  and  other  holdings. 

7.  In  cormection  with  an  investigation  then  being  conducted  by  the  Office  of  the 
Special  Counsel  (“SCO”),  the  FBI  sought  and  obtained  from  the  Honorable  Beryl  A.  Howell,  Chief 
United  States  District  Judge  for  the  District  of  Columbia,  three  search  wamants  for  emails  and 
other  content  information  associated  with  two  email  accounts  used  by  Cohen,  and  one  search 
warrant  for  stored  content  associated  with  an  iCloud  account  used  by  Cohen.  Specifically: 
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a.  On  or  about  July  1 8, 20 1 7,  the  FBI  sought  and  obtained  a  search  warrant  for 
emails  in  the  account  ]^^^^^|^gmail.com  (the  “Cohen  Gmail  Account”)  sent  or  received 
between  January  1, 2016  and  July  18, 2017  (the  “First  Cohen  Gmail  Warrant”). 

b.  On  or  about  August  8,  20 1 7,  the  FBI  sought  and  obtained  a  search  warrant 
for  content  stored  in  the  iCloud  account  associated  with  Apple  ID  ^^^^^|@gmail.com  (the 
“Cohen  iCloud  Account”  and  the  “Cohen  iCloud  Warrant”). 

^  ~7)iror'^bourNwemWT5;‘20T77t^^ 

warrant  for  emails  in  the  Cohen  Gmail  Account  sent  or  received  between  June  1,  2015  and 

November  13, 2017  (the  “Second  Cohen  Gmail  Warrant  ). 

d.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  search 

warrant  for  emails  in  the  account 
received  between  the  opening  of  the  Cohen  MDCPC  Account^  and  November  13, 2017  (the  “First 

Cohen  MDCPC  Warrant”). 

8.  The  SCO  has  since  referred  certain  aspects  of  its  investigation  into  Cohen  to  the 
USAO,  which  is  working  with  the  FBI’s  New  York  Field  Office.  As  part  of  that  referral,  on  or 
about  February  8,  2018,  the  SCO  provided  the  USAO  with  all  non-privileged  emails  and  other 
content  information  obtained  pursuant  to  the  First  Cohen  Gmail  Warrant,  Second  Cohen  Gmail 
Warrant,  and  Cohen  MDCPC  Warrant.  On  or  about  March  7,  2018,  the  SCO  provided  the  USAO 


Based  on  my  review  of  this  warrant  and  the  affidavit  in  support  of  it,  I  know  that  the  warrant  did 
not  specify  a  time  period,  but  the  affidavit  indicated  that,  pursuant  to  court  order,  the  service 
provider  had  provided  non-content  information  for  the  Cohen  MDCPC  Account  that  indicated  that 
the  account  contained  emails  from  the  approximate  period  of  March  2017  through  the  date  of  the 
wanunt. 


(the  “Cohen  MDCPC  Account”)- sent  or 
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with  all  non-privileged  content  obtained  pursuant  to  the  Cohen  iCloud  Warrant.^  A  filter  team 
working  with  the  SCO  had  previously  reviewed  the  eontent  produced  pursuant  to  these  warrants 

for  privilege. 

9.  On  or  about  February  28,201 8,  the  USAO  sought  and  obtained  search  warrants  for 
emails  in  the  Cohen  Gmail  Aceount  and  the  Cohen  MDCPC  Account,  among  other  accounts,  sent 
or  received  betweenNovember  14,2017  and  February  28, 2018  (the  “Third  Cohen  Gmail  Warrant” 
and  the  “^cond  Cohen  MDCPC  WarfgEFy.  'The  content  produced  pursuant  to”these  warrants  is“ 
subject  to  an  ongoing  review  for  privilege  by  an  SDNY  filter  team.^ 

10.  The  emails  search  warrants  described  above  are  referred  to  collectively  as  the 

“Cohen  Email  Warrants.” 

11.  On  or  about  April  7,  20 1 8,  the  USAO  and  FBI  sought  and  obtained  a  warrant  for 
prospective  and  historical  cellphone  location  information  for  Subject  Device-1  and  Subject 
Device-2.  On  or  about  April  8, 2018,  the  USAO  and  FBI  sought  and  obtained  authority  to  employ 
an  electronic  technique,  commonly  known  as  a  “triggerfish,”  to  determine  the  location  of  Subject 
Device-1  and  Subject  Device-2. 

II.  Probable  Cause 
A.  Overview 

12.  The  United  States  Attorney’ s  Office  for  the  Southern  District  of  New  York  and  FBI 
are  investigating,  among  other  things,  schemes  by  Target  Subject  Michael  Cohen  (a)  to  defraud 
multiple  banks  from  in  or  about  2016  up  to  and  including  the  present,  and  (b)  to  make  an  illegal 

^  The  SCO  had  previously  provided  a  subset  of  this  non-privileged  content  on  or  about  February 
2,  2018. 

«  On  or  about  February  28, 2018  and  April  7,  201 8,  the  USAO  and  FBI  sought  and  obtained  Rule 
41  search  warrants  authorizing  the  search  of  emails  and  content  obtained  pursuant  to  previously 
issued  warrants  for  additional  subject  offenses. 
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campaign  contribution  in  October  2016  to  then-presidential  candidate  Donald  Trump.  As  noted, 
Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President  Donald 
Trump,  and  who  previously  served  for  over  a  decade  as  an  executive  in  the  Trump  Organization, 
an  international  conglomerate  with  real  estate  and  other  holdings. 

13.  The  investigation  has  revealed  that  Cohen  has  made  affirmative  misrepresentations 
in  and  omitted  material  information  from  financial  statements  and  other  disclosures  that  Cohen 
provided  to  multiple  banks  in  connection  wWTtransacfidtTintendedAo '^feli^"“^^^  of” 
approximately  $22  million  in  debt  he  owed  on  taxi  medallion  loans  from  the  banks.  As  set  forth 
in  detail  below,  in  these  financial  statements,  and  in  his  oral  and  other  written  statements  to  these 
banks,  Cohen  appears  to  have  (i)  intentionally  misrepresented  his  ability  to  pay  cash  by  failing  to 
disclose  cash  he  began  receiving  in  20 1 7  from  new  consulting  work;  (ii)  significantly  understated 
his  total  holdings  of  cash  and  cash  equivalents;  (iii)  failed  to  disclose  tens  of  thousands  of  dollars 
he  received  in  monthly  interest  income,  and  (iv)  failed  to  inform  the  banlcs  from  which  he  was 
seeking  debt  relief  that  he  had  agreed  to  make  a  $3.8  million  cash  payment  to  a  third  party, 

in  connection  with^^^^^^^^^^|  acquisition  of  the  taxi  medallions  securing  Cohen  s 
debt.  By  making  these  misrepresentations  and  material  omissions,  Cohen  avoided  making 
monthly  payments  on  his  loans,  and  attempted  to  fraudulently  induce  the  banks  to  relieve  him  of 
certain  repayment  obligations  and  personal  guarantees  that  Cohen  and  his  wife  had  signed. 

14.  Additionally,  the  investigation  has  revealed  that  shortly  before  the  2016 
presidential  election,  Cohen  made  a  payment  of  $130,000  from  a  limited  liability  corporation 
(“LLC”)  to  Stephanie  Clifford,  an  individual  who  is  alleged  to  have  had  an  extramarital  affair  with 
then-candidate  Trump.  This  payment  was  made  to  Clifford  in  exchange  for  an  agreement  not  to 
make  any  public  disclosures  about  her  alleged  affair  with  Trump.  As  set  forth  below,  there  is 
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probable  cause  to  believe  that  Cohen  made  this  payment  to  Clifford  for  the  purpose  of  influencing 
the  presidential  election,  and  therefore  that  the  payment  was  an  excessive  in-kind  contribution  to 
the  Trump  campaign. 

15.  Based  on  my  review  of  emails  obtained  from  the  Cohen  Email  Warrants, 
information  obtained  pursuant  to  the  iCloud  Warrant,  and  documents  produced  pursuant  to 
subpoenas,  as  well  as  my  review  of  public  sources,  I  have  learned  that  Cohen  has  used  the  Subject 
Premiseito  (a)  receive  documentsTeT^'ed”to  the  transacTioT intended  to  relievrCbheh"bf  hisT^i” 
medallion  debt,  (b)  receive  documents  and/or  conduct  meetings  related  to  his  consulting  work,  (c) 
receive  documents  and/or  conduct  meetings  relating  to  his  finances  and  assets,  some  of  which,  as 
noted  above  and  as  detailed  further  herein,  he  has  concealed  from  the  banks  in  connection  with  the 
refinancing  of  his  taxi  medallion  debt,  (d)  receive  and  send  documents  relating  to  his  payment  to 
Chfford,  and  (e)  house  and  operate  electronic  devices  that  were  utilized  in  connection  with,  among 
other  things,  the  taxi  medallion  transaction,  Cohen’s  consulting  work,  and  his  payment  to  Clifford. 
Specifically,  as  described  below.  Subject  Premises-1  likely  contains  evidence  concerning  Cohen’s 
taxi  medallion  loans,  his  negotiations  with  banks,  his  personal  finances,  his  consulting  work,  his 
tax  returns,  and  his  payment  to  Clifford,  as  well  as  electronic  devices  containing  such  evidence, 
all  of  which  constitute  or  contain  evidence  of  the  Subject  Offenses.  Additionally,  as  described 
below.  Subject  Premises-2  likely  contains  evidence  relating  to  Cohen  s  consulting  work,  his 
finances,  and  his  payment  to  Clifford,  as  well  as  electronic  devices  containing  such  evidence. 
Subject  Premises-3,  as  described  below,  likely  contains  evidence  relating  to  Cohen’s  assets  and 
finances,  including  assets  that  may  not  have  been  disclosed  to  banks  in  connection  with  the 
refinancing  of  Cohen’s  taxi  medallion  debt  or  documents  relating  to  such  assets,  and  documents 
or  evidence  related  to  Cohen’s  payment  to  Clifford.  Subject  Premises-4  likely  contains  electronic 


2017.08.02 


10 


Case  l:18-cr-00602-WHP  Document  48-1  Filed  07/18/19  Page  113  of  269 


devices,  including  Subject  Device-1  and  Subject  DeviCe-2,  which  themselves  contain  evidence  of 
the  Subject  Offenses,  including  concerning  Cohen’s  taxi  medallion  loans,  his  negotiations  with 
banks,  his  personal  finances,  his  consulting  work,  his  tax  returns,  and  his  payment  to  Clifford. 
Accordingly,  and  as  set  forth  in  more  detail  below,  there  is  probable  cause  to  believe  that  the 
Subject  Premises  and  Subject  Devices  will  include  evidence  of  the  Subject  Offenses. 

B.  Probable  Cause  Regarding  Subjects’  Commission  of  the  Subject  Offenses’ 

“  “The  Banlc  Frand  ScKeine 

(i)  Cohen ’s  Statements  to  Sterling  National  Bank 
16.  As  set  forth  in  detail  below,  in  20 1 4,  Cohen,  through  LLCs  controlled  by  him  and 

his  wife,  Laura  Cohen,  entered  into  a  series  of  loans  from  Sterling  National  Bank  (“Sterling  )  and 
the  Melrose  Credit  Union  (“Melrose”),  secured  by  taxi  medallions,  for  approximately  $20  million. 
Though  entered  into  by  LLCs,  the  loans  were  also  secured  by  personal  guarantees  in  the  names  of 
both  Cohen  and  his  wife.  Over  time,  as  the  taxi  industry  weakened  and  the  medallions  lost  value, 
Cohen  sought  to  renegotiate  the  terms  of  those  loans  and/ or  relieve  himself  from  their  obligations, 
including  the  personal  guarantees.  As  part  of  that  effort,  Cohen  made  a  series  of  representations 
to  Sterling  and  Melrose  about  his  net  worth,  assets,  available  cash  and  income,  among  other  things. 
Specifically,  based  on  my  review  of  records  maintained  by  Sterling  and  Melrose,  and  public 
sources  concerning  the  taxi  industry  and  the  value  of  taxi  medallions,  as  well  as  my  participation 
in  interviews  with  a  Sterling  executive  vice-president  (the  “Sterling  Employee-1”)  and  two  other 


’  In  the  following  recitation  of  probable  cause,  I  frequently  refer  to  phone  calls  or  text  messages 
involving  Cohen.  The  text  messages  described  herein  as  sent  or  received  by  Cohen  were  all  sent 
or  received  from  the  telephone  numbers  associated  with  Subject  Device- 1  or  Subject  Device-2. 
The  vast  majority  of  the  phone  calls  described  herein  made  or  received  by  Cohen  were  made  or 
received  by  the  telephone  numbers  associated  with  Subject  Device- 1  or  Subject  Device-2,  although 
in  certain  limited  instances  Cohen  used  a  landline  or  other  phone. 
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Sterling  employees  (“Sterling  Employee-2”  and  “Sterling  Employee-3”).  I  have  learned,  among 
other  things,  the  following: 

a.  Taxi  medallions  are  small  metal  plaques  affixed  to  taxis.  Without  a  medallion,  it 
is  illegal  to  operate  a  taxi  in  cities  with  medallion  systems,  such  as  New  York  City.  Cohen  and  his 
wife  own  multiple  LLCs  that  collectively  own  32  taxi  medallions  (each  EEC  owns  two 
medallions).*  Cohen’s  purchase  of  these  New  York  taxi  medallions  was  originally  fmanced  by 
loans  Capital  One  bank,  foFwEch  the  medSliWseived  akc^llat^lYCohm  was  noEa-to 
operator,  and  leased  his  medallions  to  a  third  party.  That  third  party  made  monthly  payments  to 
Cohen,  who  in  turn  used  some  of  those  proceeds  to  make  his  monthly  loan  payments  to  Capital 

One. 

b.  In  early  2014,  Cohen  became  a  customer  of  Sterling  when  he  sought  to  refinance  a 
mortgage  on  a  rental  property  that  he  owned.  In  or  around  April  2014,  Cohen  raised  with  Sterling 
the  prospect  of  refinancing  his  taxi  medallion  loans,  which  were  then  at  Capital  One.  By  m  or  about 
September  2014,  Cohen  began  negotiating  a  lending  transaction  with  Sterling  that  would  allow 
Cohen  to  pay  off  his  loans  at  Capital  One  and  borrow  more  money  from  the  then-increase  m  value 
of  the  medallions.  According  to  Sterling  Employee-1,  in  2014,  prior  to  the  recent  upheaval  in  the 
taxi  industry — ^as  a  result  of  the  emergence  of  ride-sharing  services,  such  as  Uber  taxi  medalhon 
loans  were  viewed  by  banks  and  investors  as  safe,  short  term  credits,  as  the  market  value  of  taxi 
medallions  was  consistently  rising.  Consequently,  taxi  medallion  loans— lUce  the  loans  held  by 
Cohen — were  frequently  refinanced  at  increasing  amounts  as  the  value  of  the  medallions  rose. 
According  to  Sterling  Employee- 1,  borrowers  typically  cashed  out  the  increase  in  the  loan  amount 


«  One  of  these  companies.  Mad  Dog  Cab  Corp.,  was  jointly  owned  by  Sondra  Cohen,  who  I 
believe  is  Cohen’s  mother. 
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and  used  the  additional  funds  for  other  puiposes.  Cohen  appears  to  have  followed  this  approach  in 
2014,  when  he  agreed  to  refinance  his  medallion  loans  for  approximately  $22  million,  which 
according  to  letters  from  Capital  One  in  Sterling’s  files— was  greater  than  his  previous  debt  at 
Capital  One  Bank  ($21  million,  of  which  $14.6  million  was  a  line  of  credit  to  Cohen).  This  allowed 

Cohen  to  cash  out  the  proceeds  from  the  transaction. 

c.  Based  on  my  review  of  records  maintained  by  Sterling,  I  have  learned  that  on  or 
about  December  8, 2014,  each  of T^hen’TsixteeiTfaxilnMallibirEECrentered  into" 

and  promissory  notes  with  Sterling  for  the  principal  sum  of  $1,375,000,  with  repayment  due  on 
December  8, 2016.  Each  loan  was  signed  by  Michael  or  Laura  Cohen,  depending  on  who  was  the 
sole  shareholder  of  the  LLC.  The  address  listed  for  each  of  the  LLCs  was  the  address  for  Subject 
Premises- 1 .  The  loans  were  also  each  secured  by  a  security  agreement,  dated  the  same  day,  making 
the  medallions  collateral  for  the  notes.  To  give  Sterling  additional  security,  Michael  and  Laura 
Cohen  signed  personal  guarantees  and  confessions  of  judgment,  giving  Sterling  the  right  to  pursue 
collection  against  the  Cohens’  personal  assets  were  their  corporations  to  default  under  the  loan 
agreements.  The  personal  guaranty  agreements  stated  that  the  LLCs  had  offices  at  the  address  for 
Subject  Premises-1,  and  contained  a  notice  provision  that  stated  that  any  notices  required  by  the 
agreements  should  be  mailed  to  Subject  Premises-1 .  In  total.  Sterling  agreed  to  lend  approximately 
$22  million  to  the  Cohens’  companies. 

d.  Pursuant  to  participation  agreements.  Sterling  transferred  45  percent  of  Cohen’s 
taxi  medallion  debt  to  Melrose.^ 


®  Melrose,  which  had  a  business  principally  focused  on  taxi  medallion  loans,  is  now  in 
conservatorship  by  the  National  Credit'Union  Administration  (  NCUA  ). 
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e.  In  evaluating  Cohen’s  requested  refinancing  of  the  taxi  medallions,  Sterling  (and 
Melrose,  consistent  with  its  participation  in  the  deal)  conducted  due  diligence.  At  Sterling  s 
request,  Cohen  provided  Sterling  with  a  statement  of  financial  condition,  dated  August  1,  2014 
(the  “August  2014  Financial  Statement”),  which  indicated  that  Cohen  had  $100,740,000  in  total 
assets,  $23,550,000  in  total  liabilities,  and  a  net  worth  of  $77,190,000.1°  p^om  my  review  of  a 
Sterling  credit  memorandum,  dated  September  29,  2014,  I  know  that  Sterling  viewed  the 
transaction  favorably  because,  accdilntinpoFloan  payments,  rasrfldws  fro^ 
projected  to  be  positive,  the  value  of  the  collateral  (as  estimated  by  Sterling)  exceeded  $42  million, 
and  the  net  worth  of  Cohen— who  was  the  direct  obligor  under  the  guarantee  agreements— was 
over  $77  milhon.  An  internal  Sterling  credit  and  risk  rating  analysis  report,  dated  October  20, 
2014,  recommended  approval  of  the  loans  for  substantially  the  same  reasons. 

f.  Based  on  my  review  of  records  maintained  by  Sterling  and  public  sources,  I  have 
learned  that  over  time,  the  collateral  bacldng  Cohen’s  loans  (taxi  medallions)  lessened  in  value  due 
to  the  rise  in  ride-sharing  companies.  Additionally,  Cohen  began  falling  behind  on  loan  payments 
to  Sterling  and  Melrose.  I  know  from  records  maintained  by  Sterling  and  an  interview  with  Sterling 
Employee-2  that,  beginning  in  or  around  September  2015,  Cohen  told  Sterling,  m  sum  and 
substance,  that  the  individual  leasing  Cohen’s  medallions  had  fallen  behind  in  making  payments  to 
Cohen,  and  that  as  a  result,  the  monthly  cash  flow  fi:om  his  taxi  medallions  had  been  reduced, 
leaving  him  with  a  shortfall  of  approximately  $16,000  each  month.  For  instance,  I  have  reviewed 
an  email  from  Sterling  Employee-2,  dated  September  9,  2015,  summarizing  a  call  with  Cohen— 
which  according  to  the  email  and  toll  records  for  Cohen’s  cellphone  occurred  on  September  8, 

Cohen  subsequently  provided  Sterling  with  a  revised  statement  of  financial  condition,  also 
dated  August  1, 2014,  which  reported  assets  of  $99,420,000,  total  liabilities  of  $23,550,000,  and  a 
net  worth  of  $75,870,000. 
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2015 — during  which  Cohen  told  Sterling  Eniployee-2,  in  sum  and  substance,  about  his  cash  flow 
problems  and  a  monthly  shortfall  of  approximately  $16,000.  In  that  same  email,  Sterling 
Employee-2  commented  that  despite  Cohen’s  statements,  his  personal  financial  information 
“indicate[d]  a  strong  ability  to  make  up  the  difference  in  payments.”  Cohen,  however,  according 
to  Sterling  Employee-2,  pushed  the  bank  for  a  reduction  in  Cohen’s  monthly  payments. 

g.  From  my  review  of  records  maintained  by  Sterling  and  my  participation  in  an 

interview  wifbrStefling  Employee^2Fl  have  learnefl'that”Cohen  and  Sterlin^Employee=2“spoke 

again  on  September  28, 2015,  and  that  during  the  call  Cohen  stated,  in  sum  and  substance,  that  the 
individual  to  whom  Cohen  leases  the  medallions  had  again  reduced  monthly  payments  to  Cohen.  I 
know  from  my  review  of  records  maintained  by  Sterling  that  between  in  or  about  September  20 1 5 
and  November  2015,  Sterling  raised  the  possibility — ^both  internally  and  with  Cohen  of  Cohen 
posting  his  real  estate  holdings,  personal  residence,  or  some  other  collateral  as  additional  security 
for  the  banks.^^  According  to  these  records,  however,  Cohen  resisted  these  requests.  From  my 
review  of  loan  documents  and  records  maintained  by  Sterling,  I  know  that  in  or  about  November 
2015,  as  a  result  of  Cohen’s  representation  that  he  was  not  earning  sufficient  returns  on  his 
medallions  to  cover  monthly  interest  payments.  Sterling  and  Melrose  agreed  to  amend  their  loans 
with  Cohen  by,  among  other  things,  reducing  the  interest  rate  Cohen  paid  to  Melrose  and  extending 
the  loan  maturity  date  to  December  8, 2017. 

h.  I  Imow  from  interviews  with  Sterling  Employee- 1  and  Sterling  Employee-2,  as  well 
as  emails  I  have  reviewed,  that  in  or  about  October  2016,  Cohen  told  Sterling  Employee-1  that 
Cohen  had  a  potential  buyer  of  his  taxi  medallions,  named  Fred  Weingarten,  who  would  agree  to 

Based  on  my  review  of  property  records,  I  know  that  on  or  about  October  28,  2015,  around 
the  time  period  when  Sterling  raised  the  possibility  of  Cohen  posting  his  personal  residence— 
Subject  Premises-1 — as  collateral,  Cohen  transferred  Subject  Premises- 1  into  a  trust. 
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assume  Cohen’s  debt  with  Sterling  and  Melrose.  Based  on  my  review  of  records  maintained  by 
Sterling,  as  well  as  the  interviews  with  Sterling  Employee- 1  and  Sterling  Employee-2  referenced 
above,  I  knowthatby  or  before  October  2016,  Cohen  had  entered  into  negotiations  to  sell  his  sixteen 

corporate 

for  the  balance  of  the  loans,  which  at  the  time  was  $21,376,000.  I  know  from  my  review  of  records 
maintained  by  Sterling,  and  my  participation  in  an  interview  with  Sterling  Employee-2,  that  as  a 
condition  of  the  transfer  of  the  meddRon  loans— anrd  hec^^  Sfefhng^w^ 

Sterling  requested  that  Cohen  make  a  substantial  principal  payment  on  the  loan,  of 
approximately  one  million  dollars,  prior  to  the  transfer.  Cohen  rejected  this  request  initially.  But 
on  or  about  January  3 1 , 20 1 7,  Cohen  told  Sterling  Employee- 1 ,  in  sum  and  substance,  that  he  would 
make  a  one  million  dollar  principal  reduction  payment  in  order  to  move  forward  with  the  medallion 
transfer  deal  with^^^^f  Indeed,  in  an  email  sent  by  Cohen  to  Sterling  Employee-2  on  or 
about  February  22,  2017,  Cohen  confirmed  that  he  “agreed  to  pay  down  1  million  from  the  loan 
amount.” 

i.  Pursuant  to  the  participation  agreements  between  Sterling  and  Melrose,  Sterling 
was  requfred  to  secure  Melrose’s  agreement  to  participate  in  the  transfer  of  the  taxi  medallion  debt 
from  Cohen  to  |||||||||||||||^^  On  or  about  April  17,  2017,  Sterling  sent  a  memorandum  to 
Melrose  summarizing  the  terms  of  the  proposed  transaction,  and  noting  the  requirement  that 
Melrose  agree  to  the  terms.  On  or  about  May  2, 20 17,  Sterling  Employee- 1  told 

that  Melrose  had  agreed  to  the  deal  in  principle,  and  that  Sterling  would  be  sending  the  parties  a 

term  sheet  shortly. 

j.  In  order  for  the  banks  to  conduct  diligence  and  evaluate  the  proposed  transaction 
fully,  they  requested  financial  infonnation  from  the  parties.  On  or  about  June  7,  2017,  Sterling 
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Employee- 1  emailed  Cohen  to  request  an  “updated  personal  financial  statement,”  completed  j 

jointly  with  Cohen’s  wife,  and  Cohen’s  most  recent  federal  income  tax  return.  On  or  about  June 

8, 20 1 7,  Cohen  emailed  Sterling  Employee- 1  a  Sterling  personal  financial  statement  form  that  had  : 

been  filled  out  by  hand,  which  referenced  a  statement  of  financial  condition,  dated  May  1,  2017 

(the  “May  20 1 7  Financial  Statement”)  that  was  also  attached.  The  May  20 1 7  F inancial  Statement  ^ 

included  a  cover  letter  from  Cohen’s  accountant,  Jeffrey  Getzel,  stating,  in  sum  and  substance,  that 

the  information  in  the  statement  came  from  Cohen  rndThat  Getzel  had  nofconfirmed  its  accuracy 

i 

!l 

or  completeness.  The  May  2017  Financial  Statement  stated  that  Cohen  had  total  assets  of  ^  j 

$41,955,000,  total  liabilities  of  $39,130,000,  and  a  net  worth  of  $2,825,000.  The  May  2017 

Financial  Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in  cash,  | 

$26,155,000  in  closely  held  companies  (such  as  the  taxi  medallion  entities  and  his  real  estate 

holdings),  $3,200,000  in  real  estate  investments,  and  his  $11,000,000  personal  residence. l 

k.  Based  on  my  review  of  reports  of  law  enforcement  interviews  of  Sterling 
Employee- 1, 1  have  learned  that  Sterling  Employee- 1  reviewed  the  May  2017  Financial  Statement 

with  Cohen  to,  among  other  things,  verify  its  accuracy,  and  Sterling  Employee- 1  asked  Cohen  about  : 

specific  line  items  on  the  financial  statement,  including  the  cash  amount,  value  of  medallions,  and  j 

total  liabilities.  Cohen  stated  to  Sterling  Employee- 1,  in  sum  and  substance,  that  the  May  2017 

Financial  Statement  was  accurate.  j 

l.  On  or  about  August  16,  2017,  Sterling  Employee- 1  emailed  Cohen  and  Allen  j 

Weingarten,  attaching  a  non-binding  term  sheet  memorializing  the  potential  transaction  between  [ 


Based  on  my  review  of  Cohen’s  financial  statements,  I  know  that  the  precipitous  decline  in 
assets  fi-om  his  2014  financial  statement  to  his  2017  financial  statements  can  be  explained 
primarily  by  reported  depreciation  in  the  value  of  Cohen’s  real  estate  assets  and  medallion 
investments. 
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Sterling,  Melrose,  Cohen,  anci 


The  term  sheet  included  a  cover  letter  addressed 


to  Cohen  at  Subject  Premises-1 .  The  parties  negotiated  the  provisions  of  the  term  sheet  and,  on  or 
about  September  5,  2017,  Sterling  Employee-1  sent  Cohen  a  copy  of  the 

executed  term  sheet.  According  to  the  term  sheet,  l^^^^^^^ould  borrow  $20,000,000 
from  Sterling  and  Mehose,  to  be  secured  by  the  medallions  that 


Ivas  to  acquire  fi-om 


Cohen. 

m.  As  part  of  th^agreernent,  according  to  die  term  sheef;  $'C2C5;9 13  m 
is  what  would  remain  after  the  $20,000,000  payment  on  the  outstanding  loan  balance)  would  be 
repaid  by  Cohen  and  the  two  banks,  with  Cohen  paying  fifty  percent  and  the  banks  dividing  the 
remaining  half  of  the  balance.  Based  on  my  review  of  an  internal  Sterling  credit  memorandum, 
dated  October  4, 2017,  the  parties  reached  a  preliminary  agreement  that  Cohen  would  pay  $632,956 
of  the  remaining  $1,265,912  principal  loan  balance,  and  Sterling  and  Melrose  would  absorb 
$357,167  and  $275,789,  respectively,  in  the  form  of  charge-offs.  According  to  Sterling  Employee- 
1,  Sterling  was  willing  to  divide  the  repayment  of  the  outstanding  principal  balance— despite  its 
prior  insistence  that  Cohen  malce  a  principal  pay-down  of  at  least  one  million  dollars— because 
Cohen  represented  on  a  telephone  call  with  Sterling  Employee-1,  in  sum  and  substance,  that  he  had 
insufficient  liquidity  to  pay  the  full  outstanding  principal  balance.  As  part  of  the  agreement.  Sterling 
and  Mehose  also  agreed  to  relieve  Cohen  and  his  wife  of  the  personal  guarantees  that  they  made 
on  behalf  of  the  LLCs.  Thus,  after  completing  the  ^^^^^|transaction,  Cohen  would  no  longer 

have  had  any  outstanding  obligations  to  Sterling  or  Melrose. 

n.  Based  on  my  review  of  emails  sent  by  Sterling  employees,  I  have  learned  that 
because  the  transaction  between  the  parties  was  subject  to  fiill  credit  undei-writing  by  Sterling  and 
Mehose  (as  well  as  Melrose’s  regulators  at  NCUA),  in  August  and  September  2017,  Sterling 
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required  and  requested  additional  financial  statements  and  tax  returns  for  Cohen  and 
for  its  credit  underwriting  process.  In  response  to  Sterling’s  requests,  on  or  about  September  25, 
2017,  Cohen  emailed  Sterling  Employee-2  a  copy  of  his  2016  tax  return.  The  tax  return  listed 
Cohen’s  mailing  address  as  Subject  Premises-1.  Additionally,  on  or  about  October  5, 2017,  Cohen 
re-sent  Sterling  Employee-2  a  copy  of  his  May  2017  Financial  Statement.  A  day  later,  on  October 
6,  2017,  Cohen  emailed  Sterling  Employee-2  a  statement  of  financial  condition,  dated  September 

30, 2017  (the  “September  2017  FinanciafStatemenF)^ 

o.  Like  the  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
included  a  cover  letter  from  Jeffrey  Getzel,  Cohen’s  accountant,  stating,  in  sum  and  substance,  that 
the  information  in  the  statement  came  from  Cohen,  and  that  Getzel  had  not  confirmed  its  accuracy 
or  completeness.  The  September  2017  Financial  Statement  stated  that  Cohen  had  total  assets  of 
$33,430,000,  total  liabilities  of  $45,630,000,  and  a  negative  net  worth  of  $12,200,000.^^  Notably, 
unlike  Cohen’s  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
represented  to  Sterling  that  Cohen  had  a  negative  net  worth.  The  September  2017  Financial 
Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in  cash,  $17,630,000  in 
closely  held  companies  (including  the  taxi  medallion  entities  and  his  real  estate  holdings), 
$3,200,000  in  real  estate  investments,  and  his  $1 1,000,000  personal  residence  (which,  for  the,first 


Based  on  my  review  of  Cohen’s  financial  statements,  I  know  that  this  further  decline  in 
assets  can  be  explained  primarily  by  reported  depreciation  in  the  value  of  Cohen’s  real  estate  assets 
and  medallion  investments. 

Notably,  the  September  2017  Financial  Statement  valued  each  of  Cohen’s  thirty-two  New 
York  taxi  medallions  at  approximately  $180,187.50,  which  was  considerably  less  than  the 
$650,000  valuation  ascribed  to  each  medallion  in  the  Cohen- Weingarten  term  sheet. 
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time,  he  indicated  was  held  by  a  trust).^^  The  September  20 1 7  Financial  Statement  included  assets 
and  liabilities  not  held  in  Cohen’s  name,  such  as  various  entities  associated  with  his  taxi  medallions 
and  some  of  his  real  estate  investment  entities. 

p.  From  my  participation  in  an  interview  with  Sterling  Employee-2,  and  my  review  of 
records  maintained  by  Sterling,  I  have  also  learned  that  around  the  time  Cohen  provided  Sterling 
with  these  financial  statements — i.e.,  in  or  around  September  2017  Cohen  stopped  paying 

monthl^rlbanpayments  on  his  taxi  medallTonToans  altogether.^v^ccordingTo  Sterling Empldyee^^ 

2,  Cohen  informed  Sterling,  in  sum  and  substance,  that  he  had  insufficient  funds  to  pay  the  monthly 
principal  and  interest  payments  on  his  medallion  loans.  By  in  or  about  December  2017,  Sterling 
and  Melrose  had  not  been  paid  approximately  $276,937.92  in  monthly  principal  and  interest 
payments  on  the  medallion  loans.  Based  on  Cohen’s  financial  condition  as  conveyed  in  the 
September  2017  Financial  Statement,  and  his  delinquency  in  making  payments  to  Sterling,  among 
other  things,  the  bank’s  credit  underwriting  committee  determined  (and  memorialized  in  a 
December  2017  memorandum)  that  the  Cohen-^^^^^|;ransaction  was  favorable  for  the  banlc 
-  that  is,  that  ^^^^^^would  be  a  better  borrower  than  Cohen. 

q.  On  or  about  December  26,  2017,  Sterling  sent  Cohen  a  demand  letter  requesting 
the  immediate  receipt  of  past-due  loan  payments.  The  demand  letter  was  addressed  to  Cohen  at 
Subject  Premises-1.  On  December  29,  2017,  Sterling  sent  Cohen  a  letter  stating  that  he  was  in 
default  under  the  loans  between  Sterling  and  Cohen’s  medallion  corporations.  The  notice  of 
default  was  addressed  to  Cohen  at  Subj  ect  Premises- 1 .  Cohen  did  not  make  an  immediate  payment 
on  the  loans,  but  instead  sent  an  e-mail  to  Sterling  Employee-1  on  or  about  January  24,  2018, 

Based  on  my  review  of  property  records  maintained  by  the  City  of  New  York,  and  my 
participation  in  an  interview  with  Getzel,  I  know  that  in  2015,  Cohen  transfen-ed  his  residence  to 
a  trust.  He  did  not  disclose  that  transaction  to  Getzel  or  Sterling  until  in  or  about  September  2017. 
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stating  that  during  the  closing  of  the  Cohen-^^^^^Jransaction,  Cohen  would  bring  all 
payments  up  to  date  as  well  as  deposit  the  payoff  differential.”  Cohen  also  requested  by  email  on 
January  24, 20 1 8,  that  at  the  closing  of  the  Cohen-''^^^^|  transaction,  Sterling  provide  a  letter 
stating  that  all  of  Cohen’s  debts  have  been  satisfied  and  that  Cohen’s  personal  guarantees  of  the 
medallion  loans  had  been  terminated. 

r.  The  Cohen-J^^^^^ltransaction,  however,  did  not  close.  On  or  about  January 
^q^'^oYs^li^^^^^^^^l^attorne^mailed  attorneys  foFSfefling  and  stated  that  “at  this  time 
there  is  no  deal  with  Michael  Cohen.  Some  of  the  numbers  have  changed  and  we  are  not  prepared 
to  go  forward.” 

s.  Based  on  my  participation  in  the  interview  with  Sterling  Employee-2  and  my 
review  of  records  maintained  by  Sterling,  I  know  that  after  the  Cohen-^^^^^|deal  fell  apart. 
Sterling  assigned  Cohen’s  loans  to  Sterling  Employee-3,  who  specializes  in  collecting  on 
defaulting  loans.  From  my  participation  in  an  interview  with  Sterling  Employee-3,  my  review  of 
telephone  call  notes  taken  by  Sterling  Employee-3,  and  my  review  of  telephone  records,  I  Icnow 
that  Sterling  Employee-3  spoke  several  times  to  Cohen  on  or  about  January  30, 2018  about  paying 
down  and/or  restructuring  Cohen’s  outstanding  taxi  medallion  loans.  On  the  calls,  which  in  total 
lasted  more  than  an  hour,  Cohen  stated  in  sum  and  substance  that  he  did  not  have  more  than 
$1,250,000  to  pay  toward  the  medallion  loans.  On  the  call,  in  the  course  of  reviewing  the  failed 
Cohen^^^^^^^l  transaction.  Sterling  Employee-3  questioned  Cohen  about  the  price 

to  have  paid  for  each  medallion,  and  whether  there  was  a  side  agreement  between 
Cohen  and  Cohen  denied  that  there  was  any  side  agreement  with 

t.  On  or  about  January  31,2018,  Cohen  emailed  Sterling  Employee-3  and  proposed 
paying  $500,000  to  bring  the  loans  current  and  $750,000  to  bring  the  principal  balance  to 
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$20,500,000.  Cohen  also  suggested  revised  monthly  interest  payment  amounts.  The  signature 
block  on  the  email  indicated  that  Cohen’s  address  was  the  address  for  Subject  Premises-2.  On  or 
about  January  31,  2018,  Sterling  Employee-3  responded  to  Cohen  and  stated,  in  sum  and 
substance,  that  Cohen  would  need  to  pay  the  entirety  of  the  overdue  payments  and  pay  down  the 
principal  balance  of  the  loan  to  $20,000,000  (in  total,  a  payment  of  approximately  $1,750,000), 
and  would  need  to  make  larger  monthly  interest  payments. 

- ^ — UT--0mor-about  February-V2O18^Cohen  emailed-Sterling  Employee-3  and  proposed- 

“[pjayment  of  $1.250m  which  ALL  can  be  used  to  pay  down  principal,  if  [Sterling]  will  waive 
past  due  amounts,”  but  stated  “I  do  NOT  have  more  than  the  $1.250m.”  (Emphasis  in  original.) 
Cohen  also  stated,  in  sum  and  substance,  that  he  had  insufficient  financial  resources  to  post 
additional  collateral  or  pre-fund  monthly  payments.  The  signature  block  on  the  email  indicated 
that  Cohen’s  address  was  the  address  for  Subject  Premises-2.  Based  on  my  participation  in  an 
interview  with  Sterling  Employee-3,  I  have  learned  that  since  January  30,  2018,  Sterling  has 
continued  to  renegotiate  the  medallion  loans  with  Cohen  based  on  Cohen’s  representations  about 
his  current  financial  position.  In  particular,  according  to  Sterling  Employee-3,  Cohen  and  Sterling 
have  an  agreement  in  principal  to  restructure  Cohen’s  loans  based  in  part  of  Cohen’s  agreement  to 
make  a  principal  payment  of  approximately  $750,000,  to  make  a  payment  of  $500,000  to  become 
current  on  interest  payments,  and  to  post  $192,000  in  cash  collateral  for  his  future  monthly 
payments  on  the  loan.  Cohen  also  agreed  to  pledge  an  interest  he  had  in  a  property.  Sterling 
Employee-3  has  stated  that  had  Cohen  indicated  he  had  more  than  $1,250,000  available  to  him. 
Sterling  would  have,  among  other  things,  negotiated  for  a  larger  reduction  to  the  principal  amount 
of  the  loan. 
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(ii)  Cohen  Made  Material  Misrepresentations  About  His  Finances  to  Banks 
r.nhp.n  r,0Ticea1ed  from  Sterling  and  Melrose  Cash  Derived  from  Consulting  Work 
17.  As  set  forth  in  detail  below,  despite  multiple  written  and  oral  representations  by 
Cohen  to  Sterling  (and,  by  extension,  Melrose^^)  that  he  had  insufficient  funds  to  pay  doAvn  the 
principal  balance  of  the  medallion  loans,  make  monthly  ■  interest  payments,  or  pay  past-due 
amounts,  it  appears  that  between  2016  and  the  present,  Cohen  opened  and  maintained  banlc 
accounts  at"Fif^E^blic~BMn“Fii^t  Republte’OrmdAhen  received  m^i^^^^^^^ 
consulting  payments  in  these  accounts,  which  he  did  not  disclose  to  Sterling.  Cohen  set  up  these 
accounts  and  received  these  funds  during  the  very  period  in  which  he  made  disclosures  to  Sterlmg 
about  his  personal  finances  (including  his  assets  and  liabilities)  and  his  ability  to  malce  payments 
on  the  medalhon  loans.  In  these  disclosures  to  Sterling— and  despite  being  asked  about  these  bank 
accounts  by  his  accountant— Cohen  misled  the  bank  by  claiming  he  had  insufficient  liquidity  to 
satisfy  his  obligations  or  meet  the  banlc’ s  demands,  while  withholding  information  about  these 
ongoing  revenue  streams  and  liquid  financial  assets  at  First  Republic. 

18.  Specifically,  based  on  my  review  of  documents  and  bank  records  produced 
pursuant  to  a  subpoena  by  First  Republic,  and  my  participation  in  and  review  of  reports  of 
interviews  with  a  First  Republic  sales  manager  (“First  Republic  Employee-1”)  and  a  First  Repubhc 
senior  managing  director  (“First  Republic  Employee-2”),  I  have  learned,  among  other  things,  the 

following: 


Based  on  my  review  of  a  report  of  an  interview  conducted  with  an  employee  of  Melrose,^! 
have  learned  that,  pursuant  to  the  participation  agreement  between  Sterling  and  Melrose,  Cohen’s 
financial  statements  and  other  records  in  Sterling’s  possession  were  forwarded  to  Melr^^^^ 
Melrose  could  make  a  determination  as  to  whether  to  approve  of  the  Cohen-J^^^^ 
transaction.  Based  on  my  review  of  reports  of  interviews  wit^delros^mployees,  I  also  know 
that  Cohen  called  employees  at  Melrose  regarding  the 
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a.  Cohen  and  his  wife  have  been  customers  of  First  Republic  since  approximately 
June  2011.  Cohen  controls  several  checking  and  loan  accounts  at  First  Republic,  some  in  his  own 
name  and  others  in  the  names  of  corporate  entities.  According  to  First  Republic’s  know-your- 
customer  records  on  Cohen,^"^  his  primary  physical  address  is  the  address  for  Subject  Premises- 1 . 

b.  On  or  about  October  26,  2016,  in  Manhattan,  New  York,  Cohen  opened  a  new 
checking  account  at  First  Republic  in  the  name  of  Essential  Consultants  LLC  (the  “Essential 
Consultants  Account”).  Cohen  was  the  only  authorized  signatory  orflhe  account.  According  to 

account  opening  documents,  the  primary  address  for  Essential  Consultants  LLC  was  the  address 
for  Subject  Premises-l.  When  Cohen  opened  the  Essential  Consultants  Account,  First  Republic 
Employee- 1  conducted  an  in-person  interview  of  Cohen.  In  response  to  a  series  of  know-your- 
customer  questions  about  the  purpose  of  the  account— the  answers  to  which  First  Repubhc 
Employee-1  entered  into  a  form^^ — Cohen  stated,  in  sum  and  substance,  that  he  was  opening 
Essential  Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting 
work,  and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States. 
Cohen  also  stated,  in  sum  and  substance,  that  his  purpose  in  setting  up  the  account  was  to  keep  the 
revenue  from  his  consulting  business— which  he  said  was  not  his  main  source  of  income— separate 
from  his  personal  finances.  As  set  forth  below,  there  is  probable  cause  to  believe  that  Cohen’s 
statements  about  the  intended  purpose  of  the  account  and  source  of  funds  for  the  account  were 
false.  Specifically,  as  described  below,  the  account  was  not  intended  to  receive  and  does  not 


Certain  financial  institutions  are  required  to  conduct  such  procedures  pursuant  to  the  Bank 
Secrecy  Act  and  its  implementing  regulations.  See  3 1  U.S.C.  §  53 18;  3 1  C.F.R.  §  1020.220. 

First  Republic  Employee- 1  first  filled  out  the  form  on  the  day  he  interviewed  Cohen,  October 
26,  2016.  On  or  about  December  19,  2016,  at  the  request  of  bank  compliance  personnel.  First 
Republic  Employee- 1  updated  the  form  to  add  more  detail  about  Cohen’s  statements. 
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appear  to  have  received — ^money  in  connection  with  real  estate  consulting  work;  in  addition,  the 

account  has  received  substantial  payments  from  foreign  sources, 

c.  I  know  from  my  review  of  First  Republic  bank  records  that  were  scheduled  by  an 
FBI  forensic  accountant  that  after  Cohen  opened  the  Essential  Consultants  Account,  Cohen 
received  payments  into  that  account  from  foreign  businesses  and  entities  that  do  not  reflect  the 
stated  client  profile  for  the  residential  and  commercial  real-estate  consulting  services.  Specifically, 
fto^^iiyreview  of  A  Consultaifs  Ahbount  schddffle 

following: 

i.  Beginning  on  or  about  January  31,  2017,  Cohen  began  receiving  monthly 
payments  of  $83,333  into  the  Essential  Consultants  Account  from  an  entity  called  Columbus  Nova 
LLC.  According  to  public  sources,  Columbus  Nova  is  an  investment  management  firm  controlled 
by  Renova  Group,  an  industrial  holding  company  based  in  Zurich,  Switzerland  that  is  controlled 
by  Russian  national  Viktor  Vekselberg.  From  January  2017  to  August  2017,  the  Essential 
Consultants  Account  received  seven  payments  totaling  $583,332.98  from  Columbus  Nova  LLC. 

ii.  Beginning  on  or  about  April  5,  2017,  the  Essential  Consultants  Account 
began  receiving  payments  from  Novartis  Investments,  SARL,  which  I  believe  to  be  the  in-house 
financial  subsidiary  of  the  Swiss  pharmaceutical  company  Novartis  International  AG  (  Novartis  ), 
Between  April  2017  and  February  2018,  the  Essential  Consultants  Account  received  eleven  wire 
payments  from  a  Swiss  bank  account  held  in  the  name  of  Novartis,  each  in  the  amount  of  $99,980, 
for  a  total  of  $15099,780, 

ill.  Beginning  in  or  about  April  20 1 7,  the  Essential  Consultants  Account  started 
receiving  wire  payments  from  a  banlc  account  associated  with  the  telecommunications  company 
AT&T  Inc.  (“AT&T”)-  Specifically,  on  or  about  April  14,  2017,  AT&T  sent  $100,000  to  the 
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Essential  Consultants  Account  and,  from  in  or  about  June  2017  to  in  or  about  January  2018,  the 
Essential  Consultants  Account  received  ten  $50,000  payments  from  AT&T.  In  total,  AT&T  sent 
$600,000  to  the  Essential  Consultants  Account. 

iv.  On  or  about  May  10,  2017,  June  9,  2017,  July  10,  2017,  and  November  27, 
2017,  the  Essential  Consultants  Accormt  received  four  deposits  in  the  amount  $150,000  (totaling 
$600,000)  from  a  bank  account  in  South  Korea.  The  account  holder  from  which  the  money  was 

-sent  is  Korea-Aerospace^Industries  Ltd.  (“KAL”). . KALis^a^South  Korea-basedxompany  that — 

produces  and  sells  fixed-wing  aircraft,  helicopter  aircraft,  and  satellites  to  the  United  States 
Department  of  Defense,  among  other  customers. 

V.  On  or  about  May  22,  2017,  the  Essential  Consultants  Account  received  a 
$150,000  deposit  from  an  account  at  Kazkommertsbank,  a  Kazakhstani  bank.  The  listed  account 
holder  at  Kazkommertsbank  was  a  second  Kazakhstani  bank  named  BTA  Bank,  AO.  A  message 
accompanying  the  wire  payment  indicated  that  the  payment  was  a  “monthly  consulting  fee  as  per 
Inv  BTA-101  DD  May  10,  2017  consulting  agreement  W/N  DD  08  05  2017  CNTR  W/NDD 
08/05/2017.” 

vi.  In  total,  from  on  or  about  January  3 1, 2017  to  on  or  about  February  1, 2018, 
the  Essential  Consultants  Account  received  approximately  $3,033,112.98  in  transfers  and  checks 
from  the  aforementioned  entities.  As  of  on  or  about  January  10,  2018,  the  balance  in  the  Essential 
Consultants  Account  was  $1,369,474.23.  Cohen’s  withdrawals  from  the  Essential  Consultants 
account  reveal  that  it  was  used  for  largely  personal  purposes,  including  to  pay,  among  other  things, 
American  Express  bills  and  fees  from  “the  Core  Club,”  a  private  social  club  in  New  York. 

d.  On  or  about  April  4,  2017,  Cohen  opened  another  new  checking  account  at  First 
Republic,  this  one  in  the  name  of  Michael  D.  Cohen  &  Associates,  P.C.  (the  “MDC&A  Accoxmt”). 
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Cohen  was  the  only  authorized  signatory  on  the  account.  According  to  account  opening 
documents,  the  primary  address  for  MDC&A  Account  was  the  address  for  Subject  Premises-1. 
Among  other  things,  the  MDC&A  Account  received  ten  wire  transfers  and  one  check  from  an 
account  in  the  name  of  Squire  Patton  Boggs,  a  law  firm.  As  noted  above.  Subject  Premises-2  is 
located  inside  the  New  York  office  of  Squire  Patton  Boggs.  In  total,  from  on  or  about  April  5, 
2017,  to  on  or  about  January  2, 2018,  the  MDC&A  Account  received  $426,097.70  in  deposits,  and 
the  balance  In'  the  account  as"  ofJi5u¥r7T,“20rS7'^S3447541 35.^ 

never  disclosed  any  of  the  balance  in  the  Essential  Consultants  or  MDC&A  accounts  to  Sterling 
during  the  negotiations  with  respect  to  the  transaction  or  the  subsequent  loan 

refinancing  negotiations,  including  in  his  May  2017  Financial  Statement  and  September  2017 
Financial  Statement. 

19.  Based  on  my  review  of  emails  that  were  seized  pursuant  to  the  Cohen  Email 
Warrants,  and  my  review  of  reports  of  interviews  with  employees  of  AT&T  and  Novartis,  it 
appears  that  the  aforementioned  payments  to  the  Essential  Consultants  Account  and  MDC&A 
Account  were  for  political  consulting  work,  including  consulting  for  international  clients  on  issues 
pending  before  the  Trump  administration.  Specifically,  from  my  review  of  emails  from  the  Cohen 
Gmail  Account,  the  Cohen  MDCPC  Account,  and  public  sources,  I  have  learned  the  following; 

a.  On  or  about  April  28,  2017,  Cohen  sent  an  email  to  an  individual  whom  I  believe 
is  affiliated  with  KAI.  In  the  email,  Cohen  attached  a  “Consulting  Agreemenf  ’  between  KL4I  and 
Essential  Consultants  dated  as  of  about  May  1,  2017.  The  agreement  indicates  that  Essential 
Consultants  had  the  address  of  Subject  Premises-2.  The  document  indicates  that  Essential 
Consultants  would  render  “consulting  and  advisory  services,  as  requested”  by  ICAI,  and  that  KLAl 
would  pay  Essential  Consultants  “a  consulting  fee  of  One  Million  Two  Hundred  Thousand 
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($1,200,000.00)  US  Dollars,”  disbursed  through  eight  $150,000  installments  between  May  2017 
and  December  2017.  I  have  also  reviewed  invoices  in  amounts  of  $150,000  that  Cohen  emailed 
to  an  individual  whom  I  believe  is  affiliated  with  KAI.  At  the  top  of  the  invoices  the  address  listed 
for  Essential  Consultants  is  the  address  for  Subject  Premises-2. 

b.  On  or  about  May  8,  2017,  Cohen  sent  an  email  to  an  individual  whom  I  believe  is 
affiliated  with  BTA  Bank.  The  signature  block  on  Cohen’s  email  listed  “Essential  Consultants 
LLC”  and  “Michael  D.  Cohen  &  Associates,  PC”  and  proviclecTthe  address  for  Subject  Pfemises- 
2.  In  the  email,  Cohen  attached  a  document  purporting  to  be  a  “Consulting  Agreement”  between 
BTA  Bank  and  Essential  Consultants  dated  as  of  about  May  8, 20 1 7.  The  agreement  indicates  that 
Essential  Consultants  had  the  address  of  Subject  Premises-2.  The  document  indicates  that 
Essential  Consultants  would  render  “consulting  and  advisory  services’  to  BTA  Bank,  and  that 
BTA  Bank  would  pay  Essential  Consultants  “a  consulting  fee  of  One  Million  Eight  Hundred 
Thousand  ($1,800,000.00)  US  Dollars,”  disbursed  through  monthly  payments  of  $150,000.  On  or 
about  May  10, 2017,  Cohen  sent  an  email  to  an  employee  of  BTA  Bank,  and  attached  to  the  email 
an  invoice  to  BTA  Bauk  in  the  name  of  Essential  Consultants,  with  the  address  of  Subject  Premises- 
2.  The  invoice  contemplated  a  $150,000  payment  to  Essential  Consultants  for  a  “monthly 
consulting  fee.” 

c.  On  or  about  January  23,  2017,  Cohen  appears  to  have  entered  into  a  consulting 
agreement  with  AT&T,  which  contemplates  that  Essential  Consultants  “shall  render  consulting  and 
advisory  services  to  [AT&T]”  and  that  AT&T  would  “advise  [Essential  Consultants]  of  those  issues 
and  matters  with  respect  to  which  AT&T  Services  desires  [Essential  Consultants] ’s  assistance  and 
advice.”  The  agreement  indicates  that  Essential  Consultants  had  the  address  of  Subject  Premises- 
1.  The  contract  calls  for  AT&T  “to  pay  the  Consultant  for  his  services  ...  a  consulting  fee  of  Fifty 
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Thousand  ($50,000)  Dollars  ...  per  month.”  Based  on  my  review  of  reports  of  interviews  with 
AT&T  employees,  I  have  learned  that  AT&T  retained  Cohen  to  consult  on  political  issues, 
including  net  neutrality,  the  merger  between  AT&T  and  Time  Warner,  and  tax  reform. 

d.  On  or  about  March  1 ,  20 1 7,  Cohen  appears  to  have  entered  into  a  contract  between 
Novartis  and  Essential  Consultants,  which  provides  that  Essential  Consultants  will  “provide 
consulting  and  advisory  services  to  Novartis  on  matters  that  relate  to  the  repeal  and  replacement  of 
the— Affordable^Care-AGt~  in~-the  US  and  any--other  issues  mutually-agreeable^  to  [Essential 
Consultants]  and  Novartis.”  The  contract  provides  for  a  “consulting  fee  of  One  Million  Two 
Hundred  Thousand  ($1,200,000)  US  dollars,”  to  be  paid  to  Essential  Consultants  in  equal  monthly 
installments  over  the  course  of  a  year.  Based  on  my  review  of  reports  of  interviews  with  Novartis 
employees,  I  have  learned  that  Novartis  retained  Cohen  to  provide  political  consulting  services  and 
to  gain  access  to  relevant  policymakers  in  the  Trump  Administration. 

e.  In  or  about  February  2017,  Cohen  began  negotiating  the  terms  of  a  “strategic 
alliance”  with  Squire  Patton  Boggs.  On  or  about  March  4,  2017,  Squire  Patton  Boggs  emailed 
Cohen  a  “strategic  alliance  agreement.”  Under  the  terms  of  the  agreement,  Cohen  agreed  to 
generate  business  for  the  law  firm,  and  Squire  Patton  Boggs  agreed  to  pay  to  Cohen  “an  aimual 
strategic  alliance  fee  of  $500,000,  payable  in  twelve  (12)  equal  monthly  installments.”  Squire 
Patton  Boggs  also  agreed  to  provide  Cohen  with  “dedicated  and  segregated  office  space  in  [Squire 
Patton  Boggs’s]  New  York  and  Washington  D.C.  offices,  which  office  space  shall  be  physically 
separate  from  [Squire  Patton  Boggs’s]  offices  and  have  locked  doors  and  its  own  locked  file 
cabinets.”  On  or  about  April  3,  2017,  Squire  Patton  Boggs  announced  on  its  website  that  is  had 
formed  a  “strategic  alliance”  with  Michael  D.  Cohen  &  Associates  and  would  “jointly  represent 
clients.” 
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20.  Despite  the  significant  amount  of  money  that  Cohen  received  into  the  Essential 
Consultants  Account  and  the  MDC&A  Account,  and  the  cash  balance  in  both  accounts,  Cohen  did 
not  disclose  that  information  to  Sterling  or  Melrose.  Specifically,  based  on  my  review  of  documents 
provided  by  Getzel  (as  noted  above,  Cohen’s  accountant  at  the  time),  my  participation  in  an 
with  Getzel,  notes  I 

have  learned  the  following: 

_ _ _ a _ ^In-or-about-May-20-17,--GetzeLmet-with-Gohen-at-SubjecfPremises-2 — At_the 

meeting,  Cohen  told  Getzel,  in  sum  and  substance,  that  he  had  set  up  a  law  practice  called  Michael 
D.  Cohen  &  Associates  P.C.,  and  a  consulting  company  called  Essential  Consultants  EEC.  Cohen 
told  Getzel,  in  sum  and  substance,  that  he  expected  to  earn  $75,000  per  month  in  connection  with 
his  law  practice,  and  that  he  expected  gross  revenues  for  the  consulting  business  to  be  between  five 
and  six  million  dollars  annually. 

b.  In  or  about  October  2017,  if  not  earlier,  Getzel  was  preparing  a  personal  financial 
statement  for  Cohen.  On  or  about  October  6,  2017,  Getzel  sent  an  email  to  Cohen  in  which  Getzel 
wrote  that  “[ajttached  is  a  draft  of  the  new  PFS  as  of  September  30,  2017”  and  attached  a  draft  of 
the  September  2017  Financial  Statement.  The  draft  statement  reflected  that  as  of  September  30, 
2017,  Cohen  had  only  $1,250,000  in  cash,  total  assets  of  approximately  $33,430,000  (comprised  of 
taxi  medallion  interests,  real  estate  interests,  and  his  personal  residence  and  property),  and  habilities 
of  approximately  $45,630,000,  leaving  him  purportedly  over  $12  million  in  debt.  In  the  same  email, 
Getzel  questioned  Cohen,  in  sum  and  substance,  about  the  fact  that  the  financial  statement  did  not 
list  any  value  associated  with  either  the  Essential  Consultants  Account  or  the  MDC&A  Account: 
“[w]e  did  not  add  any  value  for  you[r]  two  operating  entities  —  Michael  D.  Cohen  &  Associates 
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POC  [sic]  and  Essential  Consultants  LLC.  Please  advise  whether  or  not  these  should  be  disclosed 
and  what  value.” 

c.  On  or  about  October  6,2017,  Cohen  called  Getzel  by  telephone^  ^which  is  reflected 
on  toll  records  for  Cohen’s  cellphone— and  told  Getzel,  in  sum  and  substance,  not  to  mclude 
Essential  Consultants  or  MDC&A  in  the  September  2017  Financial  Statement  because  they  had  no 
value.  On  or  about  October  6,  2017,  following  the  call  with  Getzel,  Cohen,  using  the  Cohen 
Account,  responded  to  Getzel’s  email  with  the  answer  "[l]66k¥^Ad  toTne:’’“Cohen  never  d^^^ 
Getzel  to  make  any  changes  to  his  cash  position  as  listed  in  the  September  2017  Financial 
Statement.  In  a  letter  dated  October  6,  2017,  addressed  to  Getzel,  Cohen  stated,  “I  have  reviewed 
the  attached  statement  of  financial  condition  and  find  it  to  be  correct  and  consistent  with  the 
representations  that  I  made  to  your  firm.  The  attached  is  an  accurate  reflection  of  my  assets, 
liabilities  and  net  worth  (deficit)  as  of  September  30,  2017.”  Attached  to  that  letter  was  the 
September  2017  Financial  Statement,  which,  as  noted  above,  was  then  transmitted  to  Sterlmg  m 
connection  with  the  proposed  taxi  medallion  transaction  between  Sterling,  Cohen,  and^^^^^| 

21 .  Based  on  my  review  of  a  report  of  an  interview  with  Sterling  Employee-1, 1  have 
learned  that  Cohen  did  not  disclose  his  income  stream  from  Essential  Consultants  to  Sterlmg 
Employee-1  or,  to  his  knowledge,  anyone  else  at  Sterling.  According  to  Sterling  Employee-1, 
knowledge  of  such  an  income  stream  would  have  affected  Sterling’s  demands  during  the 
negotiations,  particularly  with  respect  to  the  amount  of  a  principal  paydown  of  Cohen’s  debt. 

Cohen  Understated  Flis  Available  Cash 

22.  In  addition  to  withholding  the  existence  of  his  Essential  Consultants  income  from 
Sterling  and  Melrose,  it  appears  that  Cohen  also  substantially  understated  his  available  cash  and 
cash  equivalents  in  his  financial  disclosures.  Specifically,  I  know  from  my  review  of  the  September 
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2017  Financial  Statement  that  Cohen  provided  to  Sterling  that  Cohen  represented  that  he  had 
$1,250,000  in  cash  as  of  September  30,  2017.  I  also  know  that  on  or  about  January  30,  2018,  in  a 
•  telephone  call  with  Sterling  Employee-3,  and  on  February  1,  2018,  in  an  email  to  Sterling 
Employee-3,  Cohen  represented  that  he  did  not  have  more  than  $1,250,000  in  cash.  But,  from  my 
review  of  a  summary  of  bank  records  that  were  scheduled  by  forensic  accountants,  I  have  learned 
that  Cohen  had  approximately  $5,000,000  in  cash  and  cash  equivalents  as  of  September  30,  2017. 

TMditibiian>ra^  orFebraafy"“rr20  rsrCbhen  had  appoximatel)^$6-000,000"i^^^^^ 

equivalents.  Specifically,  from  my  review  of  the  account  schedule  and  bank  records,  I  have  learned 
the  following: 

a.  Cohen  has  three  checking  and/or  savings  accounts  at  Capital  One  Bank,  one  of 
which  is  in  his  wife’s  name.  As  of  September  30,  2017,  Cohen  had  $1,105,680.35  in  his  savings 
account,  and  $1,262,982.29  in  total  in  the  three  accounts  at  Capital  One  Bank.  As  of  February  1, 
2018,  Cohen  had  a  total  of  $1,389,245.78  in  these  accounts. 

b.  Cohen  has  three  accounts  at  Morgan  Stanley  in  his  name.  As  of  September  30, 
2017,  the  combined  total  in  cash  and  cash  equivalents  in  those  three  accounts  was  $1,270,600.41. 
As  of  February  1, 2018,  Cohen  had  $1,284,996.13  in  these  accounts. 

c.  As  of  September  30, 20 1 7,  Cohen  had  $260,689. 1 8  in  an  acconnt  at  Signature  Bank. 
As  of  February  1, 2018,  Cohen  had  $261,517.55  in  this  account. 

d.  In  addition  to  the  Essential  Consultants  Account  and  MDC&A  Account  at  First 
Republic,  Cohen  also  had  two  joint  checking  accounts  with  Laura  Cohen  at  First  Repnblic.  In  total, 
as  of  September  30,  2017,  Cohen  had  at  least  $1,876,209.27  in  total  in  his  four  accounts  at  First 
Republic.  As  of  February  1, 2018,  Cohen  had  $3,332,992.95  in  these  accounts. 
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e.  Cohen  has  an  account  at  Bethpage  Credit  Union  with  $25,931.39  in  it  as  of 
September  30, 2017. 

f.  As  of  September  30, 20 1 7,  Cohen  had  $  1 7,542.54  in  accounts  at  Sterling. 

g.  Cohen  has  two  accounts  at  TD  Bank — one  in  his  name  and  one  held  jointly  with  his 
wife.  Cohen  also  has  a  safety  deposit  box  at  TD  Bank — Subject  Premises-3.  The  safety  deposit 
box  was  opened  on  December  13,  2017  in  the  names  of  Michael  and  Laura  Cohen. 

- h— Infotalyas^of  September  307201-77eohen  had  atTeast  $477T3-935::08  in  his  accounts 

at  Capital  One  Bank,  City  National  Bank,  Signature  Bank,  Sterling  Bank,  Bethpage  Credit  Union, 
First  Republic,  and  Morgan  Stanley.  As  of  February  1,  2018,  Cohen  had  $6,268,732.59  in  his 
accounts  at  Capital  One  Banlc,  City  National  Bank,  Signature  Bank,  First  Republic,  and  Morgan 
Stanley.^^ 

23.  Accordingly,  based  on  the  foregoing,  it  appears  that  Cohen’s  written  and  oral 
representations  to  Sterling  and  Melrose  that  he  did  not  have  more  than  $1,250,000  were  false,  and 
that  Cohen  withheld  information  regarding  approximately  $5  million  in  hinds  from  Sterling  and 
Melrose  in  order  to  secure  favorable  terms  in  his  renegotiation  of  his  medallion  loan.  Based  on 
my  participation  in  an  interview  with  Sterling  Employee-2,  and  my  review  of  reports  of  interviews 
with  Sterling  Employee- 1  and  two  Melrose  employees,  it  is  my  understanding  that  that  Sterling 
and  Melrose  would  view  Cohen’s  understating  of  his  assets  as  material  to  its  decision  whether  to 
renegotiate  Cohen’s  medallion  loans  and  on  what  terms,  or  to  its  decision  whether  approve  of  the 
transfer  of  those  loans  to 

Based  on  my  review  of  the  account  schedules  described  above,  I  loiow  that,  as  of  the  date  of  this 
affidavit,  the  account  balances  for  TD  Bank  have  not  yet  been  included  in  the  schedule  for  either 
date  and  the  account  balances  for  Sterling  National  Bank  and  Bethpage  Credit  Union  have  not  yet 
been  included  in  the  schedule  for  February  1,  2018.  Thus,  to  the  extent  that  these  accounts  have 
positive  balances,  Cohen’s  total  balances  in  fact  were  even  higher  on  these  dates. 
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Cohen  Has  Unreported  Interest  Income 

24.  It  appears  that  Cohen  also  hid  from  Sterling  interest  income  that  he  was  receiving  in 
connection  with  a  six  million  dollar  loan  he  made  to  another  individual.  Specifically,  I  know  from 
my  review  of  the  May  2017  Financial  Statement  and  September  2017  Financial  Statement  that 
Cohen  provided  to  Sterling  that  Cohen  did  not  disclose  that  he  had  made  a  note  receivable  in  the 
amount  of  approximately  $6  million,  or  that  he  was  earning  approximately  $60,000  per  month  in 

Tntere^rincome“hrconnection'with  tha1rloanr'BuVfromTmy-review  of  a  summary-of-banfcrrecords 

that  were  reviewed  by  another  law  enforcement  agent,  my  review  of  property  records  and 
documents  obtained  pursuant  to  the  Cohen  Email  Warrants,  and  my  participation  in  an  interview 
with  Getzel,  I  have  learned  the  following: 

a.  Based  on  my  review  of  property  records,  I  have  learned  that  on  or  about  March  12, 

Cohen  agreed  to  lend  approximately 

$2,000,000.^°  It  appears  that  the  promissory  note  was  unsecured  by  any  real  property.  On  or  about 
April  28,  2014,  Cohen  and^^^^  amended  the  promissory  note,  and  restructured  the  loan  to 
increase  the  principal  amount  to  approximately  $5,000,000.  Under  the  terms  of  the  amended 
promissory  note,  the  loan  was  secured  apartment  in  Sunny  Isles  Beach,  Florida.  On 

or  about  April  8,  2015,  Cohen  and^^^|:estated  the  promissory  note  to  increase  the  principal 
amount  to  $6,000,000.^* 

b.  Based  on  my  review  of  a  copy  of  the  restated  note,  which  was  obtained  pursuant  to 
the  Cohen  Email  Warrants,  I  have  learned  that  under  the  terms  of  the  amended  and  restated 


I  learned  from  that 

The  note  states  that  the  loan  is  to  husband  and  wife, 

jointly  and  severally.  For  ease  of  reference,  I  refer  simply  to  herein. 
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promissory  note,  Cohen’s  loan  to  an  interest-only  loan,  and  that  the  principal  balance 

of  the  loan  bears  interest  at  an  annual  rate  of  12.25  percent.  I  also  loiow  that  the  amended  and 
restated  promissory  note  includes  a  schedule  of  payments  that  require  pay  Cohen 

approximately  $61,250  per  month  beginning  in  April  2015  and  ending  in  Aprd  2019.  The  note  also 
requires  that  ^^^^^^'epay  the  principal  balance  of  $6,000,000  on  April  28,  2019. 

c.  Based  on  my  review  of  bank  records,  I  have  learned  that,  consistent  with  the  terms 


of  the”^ended  and  restatedTpromissory  note. 


ha^TnadeTnonthly-payments- of ~ 


approximately  $61,250  since  April  2015.  Specifically,  based  on  my  review  of  records  maintained 
by  Capital  One  Bank,  I  have  learned  that  from  April  2015  to  October  2015,  Cohen  received  checks 


from  an  entity  callec| 


[  totaling  $6 1,250  per  month,  which  he 


deposited  into  his  personal  bank  account  at  Capital  One  Banlc.^^  It  appears  from  my  review  of  bank 


records  and  public  sources  thal| 


I  is  the  owner  of 


From  my  review  of  records  maintained  by  Capital  One  Banlc,  I  have  also  learned  that  since  October 


2015,  Cohen  has  received  checks  from  an  entity  called 


totaling 


$61,250  per  month,  which  he  deposited  into  his  personal  bank  account  at  Capital  One  Bank.  It 


is  also  the  owner  of  \ 


appears  from  my  review  of  banlc  records  and  public  sources  that^^l 

In  total,  it  appears  that  Cohen  receives  approximately  $735,000  per  year 

in  interest  payments  from 

d.  Based  on  my  review  of  Cohen’s  May  2017  and  September  2017  Financial 
Statements,  my  review  of  his  20 1 5  and  20 1 6  tax  returns  obtained  via  subpoena  and  fr-om  the  Cohen 
Email  Warrants,  and  my  participation  in  an  interview  with  Getzel,  I  have  learned  that  Cohen  did 


In  April  20 1 5,  Cohen  received  a  pro-rated  payment.  F or  all  months  thereafter,  the  total  payment 
equaled  $61,250,  but  HIM  often  made  the  payment  in  multiple  checks. 
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not  disclose  this  interest  income  he  was  receiving  from  ^^^^|to  Sterling  or  Melrose,  or  list  it 
on  his  tax  returns.  I  have  also  learned  that  while  this  interest  income  is  taxable,  Cohen  did  not  tell 
Getzel — his  accountant — about  the  income,  and  Getzel  only  learned  about  the  income  because  he 
began  doing  l^^^^^|:axes  in  2017.^^ 

25.  Accordingly,  based  on  the  foregoing,  it  appears  that  Cohen’s  representations  to 

Sterling  and  Melrose  that  he  did  not  have  more  than  $1,250,000  were  false,  and  that  Cohen 
withheld  information  relating  to  the  interest  income  he  is  receiving  from  order  to 

secure  favorable  terms  in  his  renegotiation  of  his  medallion  loan. 

Cohen  Had  a  Side  Agree]  I II  iil  ''i 

26.  As  set  forth  in  detail  below,  during  the  course  of  Cohen’s  negotiations  to  sell  his 

interest  in  taxi  medallions  and  the  associated  debt  to  Cohen  not  only 

misrepresented  his  financial  position  to  Sterling,  but  also  failed  to  disclose  a  side  agreement  he 
had  negotiated  witb^^^^^^  it  appears  that^^^^^^agreed  to  pay  an  above-market  price 
for  Cohen’s  taxi  cab  medallions,  and  in  exchange,  Cohen  agreed  to  pay  ^^^^^^|ipproximately 
$3.8  million  in  cash.  Specifically,  from  my  review  of  documents  produced  pursuant  to  a  subpoena 
by  Sterling,  and  my  paiticipation  in  interviews  with  Sterling  Employee- 1,  Sterling  Employee-2, 
and  Sterling  Employee-3, 1  have  learned,  among  other  things,  the  following: 

a.  On  or  about  September  5,  2017,  an  executed  term  sheet  was  circulated  by  Sterling 
Employee-1  to  Cohen  and  The  term  sheet  listed  Cohen’s  address  as  the  address  for 

Subject  Premises-1.  According  to  the  term  sheet, would  borrow  $20,000,000 
from  Sterling  and  Melrose,  to  be  secured  by  the  medallions  that  ^^^^^^|was  to  acquire  from 


Accordingly,  this  interest  income — ^which  should  have  been  reported  as  such  on  Cohen’s  tax 
returns — ^is  included  herein  in  calculations  of  Cohen’s  true  cash  position. 
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Cohen.  At  a  price  of  $20  million  for  thirty-two  taxi  medallions,  the  proposed  transaction  valued 
each  medallion  as  worth  $625,000.  The  term  sheet  also  contemplated  a  $1,265,913  pay-down  of 
the  principal  balance  of  the  loan.  The  term  sheet  made  no  mention  of  a  $3.8  million  payment  from 
Cohen  to  or  any  other  form  of  payment  or  financial  transaction  between  the  parties. 

b.  Additionally,  an  internal  Sterling  credit  memorandum,  dated  October  4,  2017, 

describing  the  terms  of  the  Cohen^^^^|transaction  and  the  new  loan  to  did 

not  mention  any  payments  fFom  inaudih^$3:80Hillion  p^^^^ 

memorandum  also  noted  that  the  “loan  amount  of  $20MM  indicates  a  $625M  purchase  price  per 
medalhon”  but  “it  is  recognized  that  this  is  not  in  line  with  current  market  values.  Indeed, 
according  to  an  internal  Sterling  memorandum  dated  February  5,  2018,  in  the  month  of  January 
2018,  taxi  medallions  sold  for  amounts  ranging  from  $120,000  to  $372,000.  According  to  Sterling 
Employee- 1  and  Sterling  Employee-2,  they  were  never  told  tha^^^^|agreed  to  a  purchase 
price  of  $625,000  in  exchange  for  a  lump  sum  payment  from  Cohen,  or  that  Cohen  would  malce 

any  payment  to 

c.  On  or  about  January  30,  2018,  Sterling  Employee-3  asked  Cohen  whether  Cohen 
had  a  side  agreement  with^^^^^to  payUm^a  sum  of  money  for  entering  into  the 
medallion  transaction.  Sterling  Employee-3  asked  Cohen  about  such  an  arrangement  because, 
according  to  Sterling  Employee-3,  the  price  that  ^^^^|ivas  paying  for  each  medallion 
appeared  to  be  well  above  the  market  price.  Cohen  stated,  in  sum  and  substance,  that  he  had  no 

side  agreement — and  never  had  a  side  agreement  with 

27.  While  Cohen  and^^^^^^^Hdid  not  disclose  any  payment  from  Cohen  to 
j^^^^in  communications  with  Sterling,  it  appears  that  such  a  payment  was  contemplated. 
Indeed,  based  on  my  review  of  records  maintained  by  Getzel,  and  my  participation  in  an  interview 
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with  Getzel,  I  have  learned  the  following,  in  substance  and  in  part,  regarding  the  proposed  side 
payment  from  Cohen  to 

a.  On  or  about  September  19,  2017,  Getzel  prepared  a  memorandum  for  Cohen 
entitled,  “Sale  of  NYC  Medallion  Entities  and  Debt  Assumption”  (the  “Getzel  Memorandum”). 
The  Getzel  Memorandum  summarized  the  proposed  transaction  between  Cohen  and^^^^^^^f 
in  part,  as  follows;  “Michael  and  Laura  Cohen  will  transfer  ownership  of  their  13  NYC  medallion 


entities  to  a  Buyer  who  will  assume  their  banlc  indebtedness,  upon  the  [Cohens’tpaying^down  the 
debt  portfolio  of  the  13  entities  by  $500,000  and  a  cash  payment  to  the  Buyer  of  $3,800,000.’*^ 
b.  According  to  Getzel,  Cohen  told  him  the  parameters  of  the  deal,  including  the 
payment  of  $3,800,000  to  ^^^^^^^but  Getzel  did  not  know  where  Cohen  was  going  to  obtain 
$3  800,000  to  pay  |m||H  As  noted  above,  Cohen  had  more  than  $5,000,000  in  cash  and 
cash  equivalents  as  of  September  2017,  but  had  only  disclosed  in  his  September  2017  Financial 
Statement  that  he  had  $1.25  million  in  cash. 

28  Based  on  my  review  of  records  maintained  by  Sterling  (as  well  as  Melrose,  the  bank 

with  the  participating  interest  in  the  loans)  and  reports  of  interviews  of  representatives  of  Sterling 
(and  Melrose),  I  have  seen  no  evidence  that  Sterling,  Melrose,  or  any  other  financial  institution 
involved  in  the  potential  deal  widi  Cohen  and^^^Hvas  aware  of  the  planned  $3.8  million 

side  payment  from  Cohen  to 

The  Illegal  Campaign  Contribution  Scheme 
29.  The  USAO  and  FBI  are  also  investigating  a  criminal  violation  of  campaign  finance 
laws  by  Michael  Cohen.  As  set  forth  below,  there  is  probable  cause  to  believe  that  Cohen  made 


The  reference  to  thirteen  medallions  appears  to  be  an  error  by  Getzel.  Cohen  and  his  wife 
together  owned  sixteen  corporations,  which  in  turn  owned  32  taxi  medallions. 
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an  excessive  in-kind  contribution  to  the  presidential  election  campaign  of  then-candidate  Donald 
Trump  in  the  form  of  a  $130,000  payment  to  Stephanie  Clifford,  an  individual  who  was  rumored 
to  have  had  an  extramarital  affair  with  Trump,  in  exchange  for  her  agreement  not  to  disclose  that 
alleged  affair.  As  set  forth  below,  there  is  probable  cause  to  believe  that  this  payment  was  intended 
to  keep  Clifford  from  making  public  statements  about  the  rumored  affair  on  the  eve  of  the  2016 
presidential  election,  and  thus  constitutes  a  campaign  contribution  in  excess  of  the  applicable  limit. 

307  From  my  review  of  public^ourcesy T have  learnerl  the  following: 

a.  In  or  around  October  2011,  there  were  rumors  published  on  the  gossip  websites 
TheDirty.com  that  Trump  had  had  an  extramarital  affair  with  Clifford,  an  adult  film  actress  whose 
screen  name  is  Stormy  Daniels,  in  or  around  July  2006.  In  or  about  October  2011,  Life  &  Style 
Magazine,  a  tabloid  sold  in  supermarkets,  also  published  an  article,  based  on  the  report  in 
TheDirty.com,  alleging  an  affair  had  occurred  between  Trump  and  Clifford.  Both  Trump  and 
Clifford,  through  their  representatives,  issued  denials  in  response  to  the  articles. 

b.  Specifically,  on  or  about  October  11,2011,  Keith  Davidson,  who  identified  himself 
as  Clifford’s  attorney,  sent  a  cease  and  desist  letter  to  TheDirty.com,  demanding  that  the  article 
regarding  Trump  and  Clifford  be  removed  from  the  website.  Additionally,  on  or  about  October 
12,  2011,  Cohen,  who  was  then  Executive  Vice-President  and  Special  Counsel  to  the  Trump 
Organization,  stated  to  E!  News  that  “[t]he  totally  untrue  and  ridiculous  story  .  .  .  emanated  from 
a  sleazy  and  disgusting  website. . . .  The  Trump  Organization  and  Donald  J.  Trump  will  be  bringing 
a  lawsuit  .  .  .  [and]  Mr.  Trump  and  the  Trump  Organization  would  like  to  thank  and  commend 
Stormy  Daniels  and  her  attorneys  for  their  honesty  and  swift  actions.” 

31.  On  or  about  June  16,  2015,  Trump  formally  launched  his  2016  presidential 
campaign.  On  or  about  May  4,  2016,  Trump  became  the  presumptive  Republican  Party  nominee 
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for  president,  and  on  July  19,  2016,  Trump  officially  became  the  nominee.  Based  on  my  review 
of  public  sources,  I  have  learned  that  while  it  does  not  appear  that  Cohen  had  an  official  title  as 
part  of  the  Trump  campaign,  on  multiple  occasions  Cohen  made  public  statements  on  behalf  of 
Trump  or  his  campaign.  For  instance,  on  or  about  August  18,  2016,  Cohen  appeared  on  CNN  to 
defend  Trump’s  polling  numbers. 

32.  On  or  about  October  7,  2016,  The  Washington  Fos't  published  online  a  video  and 
accompanying  audio  in-which  Trump  referred  to-women-in-what  the  article-describeias “vulgar- 
terms”  in  a  2005  conversation  with  Billy  Bush,  who  was  then  the  host  of  Access  Hollywood.  The 
following  day,  on  October  8,  2016,  Trump  appeared  in  a  video  in  which  he  stated,  among  other 
things,  “I’ve  said  and  done  things  I  regret  and  words  released  today  on  this  more  than  a  decade  old 
video  are  one  of  them.  Anyone  who  loiows  me  knows  these  words  don’t  reflect  who  I  am.  I  said 
it.  I  was  wrong  and  I  apologize.”  Based  on  my  review  of  public  sources,  I  also  know  that 
representatives  of  the  Trump  Campaign  stated,  in  sum  and  substance,  that  the  Access  Hollywood 
comment  was  an  old  and  isolated  incident. 

33.  Based  on  my  review  of  public  sources,  including  an  article  published  in  Slate 
magazine  by  a  reporter  who  interviewed  Clifford,  I  have  learned  that  around  this  same  time,  in  or 
about  October  2016,  Clifford  was  in  discussions  with  ABC’s  Good  Morning  America  show  and 
Slate  magazine,  among  other  media  sources,  to  provide  these  media  outlets  with  her  statement 
about  her  alleged  relationship  with  Trump.  According  to  the  article  in  Slate,  which  the  author 
based  on  conversations  with  Clifford  over  the  telephone  and  by  text  message,  Clifford  wanted  to 
be  paid  for  her  story  or  be  paid  by  Trump  not  to  disclose  her  accusation.  As  Cohen  summarized 
in  a  20 1 8  email  obtained  pursuant  to  the  Cohen  Email  Warrants :  “In  October  20 1 6, 1  was  contacted 
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by  counsel  for  Ms.  Clifford  stating  that  news  outlets,  including  ABC  News,  were  pursuing  the  20 1 1 
story  of  an  alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.” 

34.  From  my  review  of  telephone  toll  records^^  and  information  produced  pursuant  to 
the  iCloud  Warrant  and  Cohen  Email  Warrants,  I  have  learned  that  in  the  days  following  the  Access 
Hollywood  video,  Cohen  exchanged  a  series  of  calls,  text  messages,  and  emails  with  Keith 
Davidson,  who  was  then  Clifford’s  attorney,  David  Pecker  and  Dylan  Howard  of  American  Media, 

Tnc-(“AMF’)7i;he-publisher  oftheWhttzo«a/-En^wz>er,^^  Trumprand-Hope  Hicksrwho-was  then-  - 

press  secretary  for  Trump’s  presidential  campaign.  Based  on  the  timing  of  these  calls,  and  the 
content-  of  the  text  messages  and  emails,  I  believe  that  at  least  some  of  these  communications 
concerned  the  need  to  prevent  Clifford  from  going  public,  particularly  in  the  wake  of  the  Access 
Hollywood  story.  In  particular,  I  have  learned  the  following; 

a.  On  October  8, 2016,  at  approximately  7:20  p.m.,  Cohen  received  a  call  from  Hicks. 
Sixteen  seconds  into  the  call,  Trump  joined  the  call,  and  the  call  continued  for  over  four  minutes. 
Based  on  the  toll  records  that  the  USAO  has  obtained  to  date,  I  believe  that  this  was  the  first  call 


My  attribution  of  certain  telephone  numbers  to  certain  individuals  as  described  in  this 
affidavit  is  based  on  my  review  of  the  vCard  (virtual  contact  file)  and  text  messages  obtained  from 
Cohen’ s  telephone  pursuant  to  the  iCloud  W arrant. 

Pecker  is  President  of  AMI  and,  according  to  his  own  statements  in  public  reports,  a  personal 
friend  of  Trump.  Howard  is  the  chief  content  officer  of  AMI,  who  according  to  public  records 
reports  directly  to  Pecker. 

I  believe  that  Trump  joined  the  call  between  Cohen  and  Hicks  based  on  my  review  of  toll 
records.  Specifically,  I  know  that  a  call  was  initiated  between  Cohen’s  telephone  number  and 
Trump’s  telephone  number  at  the  same  time  the  records  indicate  that  Cohen  was  talking  to  Hicks. 
After  the  Cohen-Trump  call  was  initiated,  it  lasted  the  same  period  of  time  as  the  Cohen-Hicks 
call.  Additionally,  the  toll  records  indicate  a  “-1”  and  then  Trump’s  telephone  number,  which, 
based  on  my  training  and  experience,  means  that  the  call  was  either  transferred  to  Trump,  or  that 
Trump  was  added  to  the  call  as  a  conference  or  three-way  call  participant.  In  addition,  based  on 
my  conversations  with  an  FBI  agent  who  has  interviewed  Hicks,  I  have  learned  that  Hicks  stated, 
in  substance,  that  to  the  best  of  her  recollection,  she  did  not  learn  about  the  allegations  made  by 
Clifford  until  early  November  2016.  Hicks  was  not  specifically  asked  about  this  three-way  call. 
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Cohen  had  received  or  made  to  Hicks  in  at  least  multiple  weeks,  and  that  Cohen  and  Trump  spoke 
about  once  a  month  prior  to  this  date  -  specifically,  prior  to  this  call  on  October  8,  2016,  Cohen 
and  Trump  had  spoken  once  in  May,  once  in  June,  once  in  July,  zero  times  in  August,  and  twice 

in  September. 

b.  Approximately  ten  minutes  after  the  call  ended,  Hicks  and  Cohen  spoke  again  for 
about  two  minutes. 

^  c.  At  7’:39"p  m.,  immediatelyTfteHth^secbAd^all^ith  Htek^endedrCohen  calle 

David  Pecker  (as  noted  above,  the  President  of  American  Media  Inc.,  or  AMI)  and  they  connected 
for  thirty  seconds.  Approximately  four  minutes  later,  Cohen  called  Pecker  again  and  they  spoke 
for  more  than  a  minute.  Three  minutes  after  ending  his  call  with  Pecker,  Cohen  received  a  call 
from  Dylan  Howard  (as  noted  above,  the  Chief  Content  Officer  of  AMI),  and  they  spoke  for 
approximately  a  minute.  According  to  toll  records,  it  does  not  appear  that  Cohen  and  Howard 
spoke  regularly  prior  to  October  8,  2016,  as  it  had  been  over  a  month  since  they  had  called  each 

other. 

d.  At  7:56  p.m.,  approximately  eight  minutes  after  his  call  with  Howard  ended,  Cohen 
called  Hicks  and  they  connected  for  two  minutes.  At  approximately  the  same  time  this  call  ended, 
Cohen  received  a  call  from  Pecker,  and  they  spoke  for  about  two  minutes.  At  8:03  p.m.,  about 
three  minutes  after  ending  his  call  with  Pecker,  Cohen  called  Trump,  and  they  spoke  for  nearly 

eight  minutes. 

e.  At  8:39  p.m.  and  8:57  p.m.,  Cohen  received  calls  from  Howard  and  spoke  to  him 
for  about  four  and  six  minutes,  respectively.  At  9:13  p.m.,  about  ten  minutes  after  Cohen  and 
Howard  hung  up  from  the  second  of  these  calls,  Howard  sent  Cohen  a  text  message  that  said. 
“Keith  will  do  it.  Let’s  reconvene  tomorrow.”  Based  on  my  involvement  in  this  investigation,  I 
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believe  that  when  Howard  wrote  “Keith,”  he  was  referring  to  Keith  Davidson,  the  attorney  for 
Stephanie  Clifford.  At  3:31  a.m.,  now  on  October  9,  2016,  Cohen  sent  Howard  a  text  message  in 
response  that  said:  “Thank  you.”  Eight  minutes  later,  Cohen  sent  Howard  a  text  message  that  said: 
“Resolution  Consultants  LLC.  is  the  name  of  the  entity  I  formed  a  week  ago.  Whenever  you  wake, 
please  call  my  cell.” 

f.  The  following  day,  on  October  1 0, 20 1 6,  at  1 0 : 58  a.m.,  Howard  sent  a  text  message 
toCoh^  and  Davidson,"which  stated:  "^CeithMichaBlT^onriectih^ 

business  opportunity.  Spoke  to  the  client  this  AM  and  they’re  confirmed  to  proceed  with  the 
opportunity.  Thanlcs.  Dylan.  Over  to  you  two.”  At  12:25  p.m.,  Davidson  sent  Cohen  a  text  message 
that  stated:  “Michael  —  if  we  are  ever  going  to  close  this  deal  -  In  my  opinion,  it  needs  to  be  today. 
Keith.”  Davidson  and  Cohen  then  spoke  by  phone  for  about  three  minutes.  Based  on  my 
participation  in  this  investigation,  I  believe  that  when  Howard  wrote  that  the  client  was 
“confirmed  to  proceed  with  the  opportunity,”  he  was  referring  to  Clifford’s  agreement  in  principle 
to  accept  money  from  Cohen  in  exchange  for  her  agreement  not  to  discuss  any  prior  affair  with 
then-candidate  Trump.^* 

g.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
know  that  on  or  about  October  1 0, 20 1 6,  Clifford  and  Davidson  appear  to  have  signed  a  “side  letter 
agreement”  that  stated  it  was  an  exhibit  to  a  “confidential  settlement  agreement  and  mutual 
release”  between  “Peggy  Peterson”  and  “David  Dennison.”  The  purpose  of  the  document. 


As  set  forth  below,  AMI  was  also  involved  in  a  payment  to  model  Karen  McDougal. 
However  because  these  communications  were  in  close  temporal  proximity  to  the  events  involving 
the  negotiation  of  a  payment  to  Clifford,  the  execution  of  the  agreement  with  Clifford,  and  the 
payment  of  money  to  Clifford,  I  believe  that  these  communications  were  related  to  Clifford. 
Additionally,  based  on  my  review  of  public  statements  by  McDougal,  I  have  learned  that  she 
negotiated  an  agreement  with  AMI  several  months  prior  to  these  communications  between  Cohen 
and  Pecker,  Howard,  and  Davidson. 
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according  to  the  agreement,  was  to  define  the  “true  name  and  identity”  of  persons  named  by 
pseudonym  in  “confidential  settlement  agreement  and  mutual  release.”  The  side  letter  agreement 
specifies  the  identity  of  “Peggy  Peterson”  to  be  Clifford,  but  the  space  for  “Dennison’s”  identity 
is  blank.  The  agreement  also  includes  a  signature  page  for  “Peterson,”  “Dennison,”  and  their 
attorneys.  The  signature  page  is  signed  by  “Peterson”  and  his  attorney,  Davidson,  but  the 
document  is  unsigned  by  “Dennison”  and  his  attorney.  Based  on  my  involvement  in  this 
investigation,  I  believe  that  Davidson  sent  Cohen  this  partially-signed  “side  letter  agreement”  in 
order  to  facilitate  the  closing  of  a  deal  between  Davidson’s  client  and  Cohen  or  his  client  on 
October  10, 2016. 

35.  It  appears  that  on  October  13,  2016,  and  the  days  that  followed,  Cohen  took  steps 
to  complete  a  trausaction  with  Davidson,  including  attempting  to  open  an  account  from  which 
Cohen  could  transfer  funds  to  Davidson.  Specifically,  from  my  review  of  toll  records,  information 
obtained  pursuant  to  the  iCloud  Warrant  and  Cohen  Email  Warrants,  records  maintained  by  First 
Republic,  as  well  as  my  participation  in  interviews  with  First  Republic  employees,  I  have  learned 
the  following: 

a.  On  the  morning  of  October  13, 2016,  at  8:54  a.m.,  Cohen  sent  Pecker  a  text  message 
that  stated:  “I  need  to  talk  to  you.”  At  9:06  a.m..  Pecker  sent  a  text  message  to  Cohen  that  stated, 
“I  called  please  call  me  back.”  The  tolls  between  Cohen  and  Pecker  do  not  show  a  telephone  call 
between  8:54  a.m.  and  9:06  a.m.  Ftowever,  based  on  my  review  of  text  messages,  I  have  learned 
that  Cohen  and  Pecker  communicate  with  each  other  over  Signal,  which  is  an  encrypted 
communications  cellphone  application  that  allows  users  to  send  encrypted  text  messages  and  make 
encrypted  calls. 
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b.  At  9 :23  a.m.,  Cohen  sent  an  email  that  stated  “call  me”  to  F irst  Republic  Employee- 
2.  The  email  attached  documents  from  the  Secretary  of  State  of  Delaware  indicating  that  Cohen 
had  formed  a  limited  liability  company  called  “Resolution  Consultants  LLC”  on  September  30, 
2016.  As  noted  above,  “Resolution  Consultants”  is  the  name  of  the  entity  that  Cohen  had  told 
Howard  he  had  formed  recently  after  Howard  said  Davidson  would  “do  it.”  At  10:44  a.m.,  Cohen 
called  First  Republic  Employee-2  and  told  him,  in  sum  and  substance,  that  he  needed  an  account 

-in  the-name-of^Resolution  Consultants— opened  immediately,-and  that  he  did  not-wantan  address 

on  the  checks  written  out  of  the  account.  Later  that  day,  another  employee  at  First  Republic 
emailed  Cohen  account  opening  paperwork  to  complete.  Cohen  returned  the  account  opening 
documents  partially  completed,  but  failed  to  provide  a  copy  of  his  driver’s  license  or  passport,  and 
did  not  respond  to  the  employee’s  question  of  how  he  wanted  to  fund  the  account.  As  a  result,  the 
account  was  never  opened. 

c.  On  October  1 7, 20 1 6,  Cohen  incorporated  Essential  Consultants  LLC  in  Delaware. 
That  same  day,  he  filed  paperwork  to  dissolve  Resolution  Consultants  LLC. 

36.  Despite  these  steps  taken  by  Cohen,  it  appears  that  the  negotiation  between  Cohen 
and  Davidson  was  not  progressing  sufficiently  fast  enough  for  Davidson  or  his  client,  Clifford, 
and  they  threatened  to  go  public  with  Clifford’s  allegations  just  days  before  the  presidential 
election.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the 
iCloud  Warrant,  and  public  sources,  I  know  the  following:  ■  . 

a.  According  to  an  article  in  The  Washington  Post,  which  quoted  emails  sent  from 
Cohen’s  email  account  hosted  by  the  Trump  Organization,  on  October  17, 2016,  Davidson  emailed 
Cohen  and  threatened  to  cancel  the  aforementioned  “settlement  agreement”  by  the  end  of  the  day 
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if  Cohen  did  not  complete  the  transaction.^^  According  to  the  article,  Davidson  sent  Cohen  a 
second  email  later  in  the  day  that  stated  in  part,  “Please  be  advised  that  my  client  deems  her 
settlement  agreement  canceled  and  void.”  At  4:00  p.m.  that  day,  Cohen  called  Davidson  and  they 
spoke  for  over  five  minutes. 

b.  Cohen’s  4:00  p.m.  call  with  Davidson  and/or  Davidson’s  threats  to  cancel  the 
“settlement  agreement”  appear  to  have  touched  off  a  flurry  of  communications  about  the  settlement 

agreement  and  whether  Clifford  would  go  public.  SpecificaUy. 

i.  At  4:43  p.m.,  Howard  sent  Cohen  a  text  message  that  stated:  “I’m  told 

they’re  going  with  DailyMail.  Are  you  aware?”  One  minute  later,  Cohen  responded:  “Call  me.” 
Based  on  my  involvement  in  this  investigation,  I  understand  Howard’s  text  to  mean  that  he  heard 
that  Clifford  was  going  to  take  her  story  of  an  extramarital  affair  with  Trump  to  the  Daily  Mail,  a 

tabloid  newspaper. 

ii.  At  4:45  p.m.,  Howard  called  Cohen  and  they  spoke  for  over  two  minutes. 

Moments  later,  Davidson  and  Cohen  spoke  for  about  two  minutes. 

iii.  At  5:03  p.m.,  Cohen  attempted  to  call  Trump,  but  the  call  only  lasted  eight 

seconds.  This  was  Cohen’s  first  call  after  he  spoke  with  Davidson. 

iv.  At  5:25  p.m.,  Cohen  texted  Howard,  stating:  “Well???” 

V  At  6:44  p.m.,  Howard  responded  to  Cohen’s  text,  stating:  Not  taking  my 

calls.”  Cohen  responded  one  minute  later:  “You’re  kidding.  Who  are  you  trying  to  reach? 
Howard  responded  one  minute  later:  “The  ‘agent.’”  Based  on  my  involvement  in  this 


Due  to  the  partially  covert  nature  of  the  investigation  to  this  date,  the  USAO  has  not  requested 
documents  from  the  Trump  Organization  or  Davidson,  and  thus  does  not  possess  the  emai 
referenced  in  this  article. 
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investigation,  I  understand  Howard’s  text  messages  to  mean  that  he  attempted  to  contact  Davidson 
about  the  matter  involving  Clifford,  but  that  Davidson  was  not  taking  Howard’s  calls. 

vi.  At  6:49  p.m.,  Cohen  called  Howard  and  they  spoke  for  nearly  four  minutes. 

c.  The  following  day,  on  October  18,  2016,  TheSmokingGtin.com,  a  website  that 
publishes  legal  documents  and  mugshots,  published  an  article  called:  “Donald  Trump  and  the  Pom 
Superstar,”  which  alleged  that  Tmmp  had  an  extramarital  affair  with  Clifford.,  However,  the 
article  noted  that  Clifford  had  declined  to  comment.  

37.  On  or  about  October  25,  2016,  the  communications  between  Cohen,  Davidson, 
Howard  and  Pecker  picked  up  again,  apparently  concerning  a  transaction  involving  Clifford. 
Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen  Email 
Warrants  and  iCloud  Warrant,  as  well  as  my  review  of  public  sources,  I  have  learned  the  following: 

a.  On  October  25,  2016,  at  6:09  p.m.,  Howard  sent  Cohen  a  text  message  stating: 
“Keith  calling  you  urgently.  We  have  to  coordinate  something  on  the  matter  he’s  calling  you  about 
or  its  [sic]  could  look  awfully  bad  for  everyone.”  One  minute  later,  Davidson  sent  Cohen  a  text 
message  stating  “Call  me.”  Cohen  and  Davidson  called  each  other  several  times  over  the  next  half 
hour  but  appear  not  to  have  connected.  At  6:42  p.m.,  Cohen  and  Davidson  spoke  for  about  eight 
minutes.  At  7:1 1  p.m.,  they  spoke  for  another  two  minutes. 

b.  The  next  morning,  on  or  about  October  26, 2016,  at  8:26  a.m.,  Cohen  called  Trump 
and  spoke  to  him  for  approximately  three  minutes.  At  8:34  a.m.,  Cohen  called  Trump  again  and 
connected  for  a  minute  and  a  half. 

c.  At  approximately  9 :04  a.m. — ^less  than  thirty  minutes  after  speaking  with  Trump — 
Cohen  sent  two  emails  to  the  person  who  had  incorporated  Resolution  Consultants  and  Essential 
Consultants  for  him,  and  stated  “can  yon  send  me  asap  the  filing  receipt”  and  then,  in  the  second 
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email,  “for  Essential  Consultants  LLC.”  That  person  responded  with  the  filing  receipt  two  minutes 
later  at  9:06  a.m.  and  with  the  certification  of  formation  23  minutes  later,  at  9:27  a.m. 

d.  Shortly  after  that,  Cohen  contacted  First  Republic  Employee-2  and  told  him,  in  sum 
and  substance,  that  he  decided  not  to  open  an  account  in  the  name  of  “Resolution  Consulting  and 
instead  would  be  opening  a  real  estate  consulting  company  in  the  name  of  “Essential  Consultants.” 
Cohen  told  First  Republic  Employee-2  that  he  was  at  Trump  Tower,  and  wanted  to  go  to  a  First 

RepuWic  branch  acros^s  the  street  toT)pinthe^ccountrTdTirsfRepblic  Employ 

Republic  Employee-1,  a  preferred  banker  at  that  branch,  assist  Cohen.  At  11:00  a.m..  First 
Republic  Employee- 1  called  Cohen.  I  know  from  my  participation  in  an  interview  with  First 
RepubUc  Employee- 1 ,  that  around  the  time  of  the  call  he  went  to  Cohen’ s  office  in  Trump  Tower- 
on  the  same  floor  as  the  Trump  Organization^ — and  went  through  account  opening  questions, 
including  Icnow  your  customer  questions,  with  Cohen.  In  response  to  a  series  of  know-your- 
customer  questions  about  the  purpose  of  the  account — ^the  answers  to  which  First  Republic 
Employee- 1  entered  into  a  form— Cohen  stated,  in  sum  and  substance,  that  he  was  openmg 
Essential  Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consultmg 
work,  and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States. 
Based,  on  my  review  of  records  obtained  from  First  Republic,  it  appears  that  this  account  (the 
“Essential  Consultants  Account”)  was  created  at  a  time  between  1 1 :00  a.m.  and  1:00  p.m. 

e.  At  1:47  p.m.,  Cohen  called  Davidson  and  they  spoke  for  approximately  two 
minutes.  At  approximately  1 :49  p.m.,  Davidson  emailed  Cohen  wiring  instructions  for  an  attorney 
client  trust  account  at  City  National  Banlc. 

f  After  the  Essential  Consultants  Account  was  opened  on  October  26,  2016,  Cohen 
transferred  $131,000  from  a  home  equity  line  of  credit  that  Cohen  had  at  First  Republic  to  the 
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Essential  Consultants  Account.  Following  the  transfer,  at  approximately  4:15  p.m.  on  October  26, 
2016,  First  Republic  Employee-2 ’s  assistant  emailed  Cohen  at  his  Trump  Organization  email 
address  to  tell  him  that  the  funds  had  been  deposited  into  the  Essential  Consultants  Account. 
Cohen  forwarded  that  email  to  the  Cohen  Gmail  Account  and  then  forwarded  it  to  Davidson. 

g.  At  6:37  p.m.,  Cohen  asked  Pecker  by  text  message,  “Can  we  speak?  Important.” 
Cohen  called  Pecker  at  6:49  p.m.  and  connected  for  thirty  seconds.  At  6:57  p.m.,  Cohen  sent 
Howard  a  text  message,  stating:  “Please  call  me.  Important.”  Cohen  called  Howard  at  7.00  p.m. 
and  connected  for  about  thirty  seconds.  At  7:06  p.m.,  Cohen  called  Pecker  again  and  they  spoke 
for  nearly  thirteen  minutes.  At  7:24  p.m.,  Howard  sent  a  text  message  to  Cohen  that:  “He  said 
he’d  call  me  back  in  20  minutes.  I  told  him  what  you  are  asking  for  his  [sic]  reasonable.  I’ll  get 
it  sorted.”  Approximately  an  hour  later,  at  8:23  p.m.,  Howard  told  Cohen  by  text  message  to 
“check  your  Gmail  for  email  from  my  private  account.”  In  an  email  sent  at  8:23  p.m.  by  Howard 
to  Cohen  and  Davidson,  with  the  subject  line  “Confirmation,”  Howard  stated.  Thank  you  both 
for  chatting  with  me  earlier.  Confirming  agreement  on:  -  Executed  agreement,  hand-signed  by 
Keith’s  client  and  returned  via  overnight  or  same-day  FedEx  to  Michael,  -  Change  of  agreement 
to  reflect  the  correct  EEC,  -  Transfer  of  funds  on  Thursday  AM  to  be  held  in  escrow  until  receipt 
of  agreement.”  After  receiving  that  email,  at  approximately  8:27  p.m.,  Cohen  asked  Howard  by 
text  message,  “Can  you  and  David  [Pecker]  give  me  a  call.”  Howard  promptly  responded:  “David 
is  not  around  I  think.  I’ll  call.”  At  8:28  p.m.,  Howard  called  Cohen  and  they  spoke  for  three 
minutes. 

38.  On  October  27,  2016,  Cohen  made  a  payment  to  Davidson  of  $130,000— with  the 
funds  intended  for  Clifford — -for  the  purpose  of  securing  her  ongoing  silence  with  respect  to  the 
allegations  that  she  had  an  extramarital  affair  with  Trump.  Specifically,  based  on  my  review  of 
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toll  records,  bank  records,  and  information  obtained  pursuant  to  the  iCloud  Warrant  and  Cohen 

Email  Warrants,  I  have  learned  the  following: 

a.  At  9:47  a.m.,  Cohen  sent  Davidson  an  email,  stating:  “Keith,  kindly  confirm  that 

the  wire  received  today,  October  27,  2016  shall  be  held  by  you  in  your  attorney’s  trust  account 
until  such  time  as  directed  for  release  by  me,  in  writing.  Additionally,  please  ensure  that  all 
paperwork  contains  the  correct  name  of  Essential  Consultants  EEC.  I  thank  you  in  advance  for 

your  assistance  and  look  forward  to  hearing  from  you  later.” 

b.  At  approximately  10:01  a.m.,  according  to  records  provided  by  First  Republic 
Bank,  Cohen  completed  paperwork  to  wire  $130,000  from  the  Essential  Consultants  Account— 
which  had  been  funded  a  day  prior  from  Cohen’s  home  equity  line  of  credit  ^to  the  attorney  client 
trust  account  at  City  National  Bank  that  Davidson  had  specified  in  the  wiring  instructions  he  sent 

to  Cohen.  The  wire  transfer  was  made  shortly  thereafter. 

c.  At  10:02  a.m.,  Davidson  responded  to  Cohen’s  email  from  9:47  a.m.,  stating.  I 
confirm  that  I  wdl  work  in  good  faith  &  that  no  funds  shall  be  disbursed  unless  &  until  the  plaintiff 
personally  signs  all  necessaty  settlement  paperwork,  (the  form  of  which  will  match  the  prior 
agreement).  The  settlement  docs  will  name  the  correct  corporation,  (Essential  Consultants  EEC). 
Plaintiffs  signature  will  be  notarized  and  returned  to  you  via  FedEx.  Only  after  you  receive  FedEx 
will  I  disburse.  Fair?” 

d.  At  10:50  a.m..  First  Republic  Employee-1  sent  Cohen  an  email  confirming  that  the 

payment  had  been  sent  and  providing  him  with  the  wire  number. 

39.  On  October  28,  2016,  and  the  days  that  followed,  Cohen  finalized  the  transaction 
with  Davidson.  Specifically,  based  on  my  review  of  toll  records,  information  obtamed  pursuant 
to  the  iCloud  Warrant,  public  sources,  and  bank  records,  I  Icnow  the  following: 
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a.  On  October  28, 20 1 6,  at  1 1 :48  a.m.,  Cohen  spoke  to  Trump  for  approximately  five 
minutes.  Beginning  at  1:21  p.m.,  Cohen  attempted  a  series  of  phone  calls  to  Davidson,  Pecker, 
and  Howard  throughout  the  day,  although  it  appears  he  may  only  have  connected  with  Howard. 

b.  Later  that  day,  at  approximately  7:01  p.m.,  Davidson  stated  to  Cohen  by  text 
message  that  “all  is  AOK.  I  should  have  signed,  notarized  docs  on  Monday.  You  should  have 
them  on  Tuesday.”  Cohen  thanked  him  and  said  “I  hope  we  are  good.”  Davidson  responded,  “I 
assure  you.  We  are  very  good.”  Howard  also  texted  Cohen  at  7:08  p.m.,  “Keith  [Davidson]  says 
we  are  good.”  Cohen  then  responded  “OK”  to  Howard  and  “Excellent”  to  Davidson.  At 
approximately  10:30  p.m.,  Cohen  spoke  to  Hicks  for  three  minutes. 

c.  On  October  31,  2016,  Cohen  called  Howard  at  8:22  p.m.  and  they  spoke  for  over 
three  minutes.  At  8:32  p.m.,  Cohen  received  text  messages  from  both  Howard  and  Davidson. 
Howard  said:  “You’ll  have  paperwork  tomorrow  says  Kd3.”  Davidson  said:  “We  are  AOK.  You 
will  be  receiving  a  package  tomorrow.”  Cohen  responded  “Thank  you”  to  Howard  and  “Thanks 
Keith.  Will  call  you  then”  to  Davidson.  From  my  involvement  in  this  investigation,  I  believe 
Davidson  was  referring  to  a  signed  nondisclosure  agreement  when  he  told  Cohen  that  he  would 
receive  a  package. 

d.  Based  on  my  review  of  court  filings  that  became  public  in  20 1 8, 1  have  learned  that 
on  or  about  October  28,  2016,  “EC,  EEC  and/or  David  Dennison”  entered  into  a  “confidential 
settlement  agreement  and  mutual  release”  with  “Peggy  Peterson,”  pursuant  to  which  “Peterson” 
agreed  not  to  disclose  certain  “confidential  information  pertaining  to  [Dennison]”  in  exchange  for 
$130,000.  The  agreement  provided  that  “EC,  EEC”  would  wire  the  funds  to  “Peterson’s”  attorney, 
who  would  then  transfer  funds  to  “Peterson.”  Cohen  signed  the  agreement  on  behalf  of  “EC, 
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LLC.”  The  agreement  stated  that  the  address  for  “EC,  LLC,”  which  was  later  referred  to  in  the 
agreement  as  “Essential  Consultants,  LLC,”  was  Cohen’s  residence. 

e.  Consistent  with  the  “confidential  settlement  agreement  and  mutual  release,”  on  or 
about  November  1,  2016,  Davidson  transferred  $96,645  from  his  attorney  client  trust  account  at 
City  National  Bank  to  a  bank  account  in  Clifford’s  name.  The  wire  had  the  annotation  “net 
settlement.”  On  the  same  day,  at  approximately  9:48  a.m.  Davidson  sent  Cohen  a  text  message 
"wltih  a  picture  of  a  FedEx  deIiv^"confirn^  statinphaf  at  approximatNy  9:09  a.m— a"packa:ge 

shipped  by  Davidson  the  previous  day  had  arrived  for  Cohen  at  his  Trump  Organization 
address.  On  the  same  day,  at  approximately  6:14  p.m.,  Davidson  sent  Cohen  an  email  with  an 
audio  file  attached  and  said  “Give  this  a  lesson  [sic]  and  then  call  me.”  The  audio  attachment  was 
titled  “Stormy .mp3”  and  was  a  five-minute  recording  of  Davidson  interviewing  Clifford  about 
recent  public  allegations  made  by  an  adult  film  star  named  Jessica  Drake  regardmg  her  alleged 
past  affair  with  Trump;  in  the  recording,  Clifford  explained  die  reasons  she  believed  that  Drake 
was  not  credible.  Less  than  an  houi*  later,  at  approximately  7:05  p.m.,  Cohen  called  Trump,  but  it 
appears  that  they  did  not  connect.  Cohen  then  called  a  telephone  number  belonging  to  Kellyanne 
Conway,  who  at  the  time  was  Trump’s  campaign  manager.  They  did  not  connect.  At 
approximately  7:44  p.m.,  however,  Cohen  received  a  return  call  from  Conway,  which  lasted  for 
approximately  six  minutes. 

40.  OnNovember  4, 2016,  just  three  days  after  the  Clifford  transaction  was  completed 
and  just  four  days  before  the  presidential  election,  the  Wall  Street  Journal  published  an  article 
alleging  that  the  National  Enquirer  had  “Shielded  Donald  Trump”  from  allegations  by  Playboy 
model  Karen  McDougal  that  she  and  Trump  had  an  affan.  The  article  alleged  that  AMI  had  agreed 
to  pay  McDougal  to  bury  her  story.  McDougal,  like  Clifford,  had  been  represented  by  Davidson. 
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Based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen  Email  Warrants 
and  iCloud  Warrant,  and  public  sources,  it  appears  that  Cohen  spoke  frequently  to  Davidson, 
Howard,  Pecker,  and  Hicks  around  the  time  of  this  article’ s  publication — -just  days  before  Election 
Day — about  the  importance  of  preventing  the  McDougal  and  Clifford  stories  from  gaining  national 
traction.  Specifically,  I  have  learned  the  following: 

a.  Between  4:30  and  8:00  p.m.  on  November  4,  Cohen  communicated  several  times 
with  Howard,  Pecker  and  Davidson.  For  instance,  at  approximately  4:49  p.m.,  Cohen  sent  Howard 

a  text  message  with  a  screenshot  of  an  email  forwarded  to  him  by  another  Tmmp  Organization 
lawyer.  The  forwarded  email  was  from  a  Wall  Street  Journal  reporter,  and  asked  for  comment 
from  Trump  and/or  the  campaign  on  the  story.  Cohen  also  spoke  with  Hicks  several  times, 
including  shortly  before  and/or  after  calls  with  Pecker,  Howard  and  Davidson.  Indeed,  at 
approximately  7:33  p.m.,  using  two  different  cellphones  subscribed  to  him,  Cohen  appears  to  have 
been  talking  to  Davidson  and  Hicks  at  the  same  time. 

b.  At  approximately  8:51  p.m.,  Cohen  sent  Howard  a  message,  stating:  “She’s  being 
really  difficult  with  giving  Keith  a  statement.  Basically  went  into  hiding  and  unreachable.”  One 
minute  later,  Howard  responded:  “I’ll  ask  him  again.  We  just  need  her  to  disappear.”  Cohen 
responded,  “She  definitely  disappeared  but  refuses  to  give  a  statement  and  Keith  cannot  push  her.” 
At  approximately  8:55  p.m.,  Howard  responded  to  Cohen’s  text:  “Let’s  let  the  dust  settle.  We  don’t 
want  to  push  her  over  the  edge.  She’s  on  side  atpresentand  we  have  a  solid  position  and  a  plausible 
position  that  she  is  rightfully  employed  as  a  columnist.”  Based  on  my  involvement  in  this 
investigation,  I  believe  Cohen  and  Howard  were  referring  to  Karen  McDougal  when  they  were 
discussing  “she”  and  “her.”  Additionally,  I  believe  Howard’s  statement  that  “we  have  ...  a 
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plausible  position  that  she  is  rightfully  employed  as  a  columnist”  was  a  reference  to  the  fact  that 
AMI  had  given  McDougal  payments  for  her  role  as  a  puiported  columnist  for  the  company. 

c.  At  approximately  8:58  p.m.  on  November  4,  2016,  Howard  attempted  to  reassure 
Cohen  about  the  effect  of  the  forthcoming  Wall  Street  Journal  article,  texting,  “I  think  it’ll  be  ok 
pal.  I  think  it’ll  fade  into  the  distance.”  Cohen  responded,  “He’s  pissed.”  Howard  wrote  back, 
“I’m  pissed!  You’re  pissed.  Pecker  is  pissed.  Keith  is  pissed.  Not  much  we  can  do.”  Based  on 
my  involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  Trump  when  he  stated  “he’s 
pissed.”  Cohen  asked  Howard  at  approximately  9:00  p.m.  how  the  Wall  Street  Journal  could 
publish  its  article  if  “eveiyone  denies.”  Howard  responded,  “Because  there  is  the  payment  from 
AMI.  It  looks  suspicious  at  best.” 

d.  At  approxhnately  9:03  p.m.,  Hicks  called  Cohen  and  they  spoke  for  two  minutes. 
At  approximately  9:11  p.m.,  Cohen  called  Howard  and  spoke  to  him  for  five  minutes.  At 
approximately  9:15  p.m..  Hides  called  Cohen  and  they  spoke  for  nearly  seven  minutes.  Again, 
Cohen  used  different  phones  for  these  two  calls,  such  that  he  appears  to  have  been  on  both  calls 
for  about  a  minute  of  overlap.  At  approximately  9:32  p.m.,  Cohen  texted  Pecker,  “The  boss  just 
tried  calling  you.  Are  you  free?”  A  minute  later,  Cohen  texted  Howard,  “Is  there  a  way  to  find 
David  quickly?” 

e.  At  approximately  9:50  p.m.,  the  Wall  Street  Journal  article  was  published  online. 
Howard  and  Hicks  both  sent  web  links  for  the  article  to  Cohen.  Over  the  next  half  hour,  Cohen 
and  Howard  exchanged  several  text  messages  commenting  on  how  the  story  came  across.  The  next 
morning  on  November  5, 2016,  at  approximately  7:35  a.m.,  Cohen  texted  Hicks,  “So  far  I  see  only 
6  stories.  Getting  little  to  no  traction.”  Hicks  responded,  “Same.  Keep  prayhigl!  It’s  working!” 
Cohen  wrote  back,  “Even  CNN  not  talking  about  it.  No  one  believes  it  and  if  necessary,  I  have  a 
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statement  by  Storm  denying  everything  and  contradicting  the  other  pom  stars  statement.  I  wouldn’t 
use  it  now  or  even  discuss  with  him  as  no  one  is  talking  about  this  or  cares!”  Based  on  my 
involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  the  above-referenced  recorded 
audio  statement  by  Clifford  that  he  obtained  from  Davidson,  and  was  stating  that  such  a  statement 
could  be  used  to  influence  potential  negative  media  relating  to  Trump,  but  was  unnecessary  at  that 
time.  Based  on  a  text  message  from  Hicks  to  Cohen,  I  believe  that  later  that  morning,  Pecker 

spoke  to  Trump. — — — — - — — - - — 

41.  On  or  about  November  8, 2016,  Trump  won  the  election  for  President  ofthe  United 


States. 

42.  On  or  about  January  12,  2018,  the  Wall  Street  Journal  first  reported  that  Cohen 
arranged  a  payment  to  Clifford.  On  or  about  January  22,  2018,  Common  Cause,  a  government 
watchdog  group,  filed  a  complaint  with  the  Federal  Election  Commission,  alleging  that  Cohen  had 
violated  campaign  finance  laws  by  making  the  payment  to  Clifford.  Based  on  my  review  public 
sources  following  that  report,  as  well  as  emails  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 


have  learned  the  following: 

a.  On  or  about  January  23,  2018,  the  day  after  Common  Cause  filed  its  complaint, 

Cohen  began  emailing  himself  drafts  of  statements  describing  his  payment  to  Clifford. 

Additionally,  on  January  23,  2018,  Cohen  emailed  the  following  draft  of  that  statement  to  an 

individual  who  appears  to  be  writing  a  book  on  Cohen’s  behalf: 

In  October  2016, 1  was  contacted  by  counsel  for  Ms.  Clifford  stating  that 
news  outlets,  including  ABC  news,  were  pursuing  the  2011  story  of  an 
alleged  affair  between  Mi'.  Trump  and  Ms.  Clifford.  Despite  the  fact  that 
both  parties  had  already  denied  the  allegation,  as  Mr.  Trump’s  longtime 
special  counsel  and  protector,  I  took  it  upon  myself  to  match  the  offer  and 
keep  the  story  from  breaking.  I  knew  the  allegation  to  be  false,  but  /  am 
also  a  realist  who  understands  that  just  because  something  is  false  doesn  ’t 
mean  that  it  doesn ’t  create  harm  and  damage.  I  could  not  allow  this  to 
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occur.  I  negotiated  a  non-disclosure  agreement  with  Ms.  Clifford’s 
counsel  and  tendered  the  funds.  I  did  this  through  my  Delaware  LLC  and 
transferred  personal  funds  to  cover  the  agreement.  I  was  not  reimbursed 
any  monies  from  Mr.  Trump,  the  Trump  Organization,  any  third  party  or 
the  Presidential  campaign.  At  no  point  did  I  ever  advise  Mr.  Trump  of  my 
communications  or  actions  regarding  this  agreement.  As  outlandish  and 
unusual  as  this  may  appear,  the  Trumps  have  been  like  family  to  me  for 
over  a  decade.  It’s  what  you  do  for  family. 

(Emphasis  added.)  Based  on  my  involvement  in  this  investigation,  I  believe  that  the  above  email 
is  an  acknowledgeme;nt  that  the  allegation  of  the  affair  had  existed  for  some  time  (“...t/ze  2011 

story. . .”),  but  that  Cohen  was  motivated  to  “keep  the  story  from  breaking”  again  in  October  2016. 

b.  On  or  about  February  13,  2018,  Cohen  said  in  a  statement  to  The  New  York  Times 
that  “Neither  the  Trump  Organization  nor  the  Trump  campaign  was  a  party  to  the  transaction  with 
Ms.  Clifford.  The  payment  to  Ms.  Clifford  was  lawful,  and  was  not  a  campaign  contribution  or  a 
campaign  expenditure  by  anyone.”  Cohen  declined  to  answer  follow-up  questions  including 
whether  Trump  had  been  aware  of  the  payment,  why  Cohen  made  the  payment,  or  whether  similar 
payments  had  been  made  to  other  people. 

c.  On  or  about  February  14, 2018,  Cohen  was  asked  by  The  New  York  Times  v/heHror 
Trump  had  reimbursed  him,  whether  he  and  Trump  had  made  any  arrangement  at  the  time  of  the 
payment,  or  whether  he  had  made  payments  to  other  women.  Cohen  stated  in  response,  “I  can’t 
get  into  any  of  that.”  On  or  about  February  14,  2018,  Cohen  also  stated  to  The  Washington  Post 
that;  “In  a  private  transaction  in  2016, 1  used  my  own  personal  funds  to  facilitate  a  payment  of 
$130,000  to  Ms.  Stephanie  Clifford.  Neither  the  Trump  Organization  nor  the  Trump  campaign 
was  a  party  to  the  transaction  with  Ms.  Clifford,  and  neither  reimbm-sed  me  for  the  payment,  either 
directly  or  indirectly.’’ 

43 .  On  or  about  March  9,2018,  Cohen  stated  to  ABC  News  that  “the  funds  were  taken 
from  my  home  equity  line  and  transfeif  ed  internally  to  my  LLC  account  in  the  same  bank. 
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44.  Accordingly,  for  the  foregoing  reasons,  there  is  probable  cause  to  believe  that 
Cohen  committed  violations  of  the  Campaign  Finance  Offenses  by  making  an  in-kin4  contribution 
to  Trump  or  the  Trump  campaign  in  the  form  of  a  $130,000  payment  to  Clifford  on  the  eve  of  the 
election.  Indeed,  while  he  denies  having  given  an  unlawful  contribution,  in  his  own  statements 
Cohen  has  admitted  that  he  paid  $130,000  of  his  “personal  funds”  to  Clifford  and  that  the  payment 
occurred  less  than  two  weeks  before  the  election,  as  Trump  was  facing  negative  media  allegations 
about  his  behavior  toward  women, “even  thougk  alleptibnsAff’atTafMr  betweeirTrunrp  a^^ 
Clifford  existed  sinee  2011.  In  addition,  the  communieation  records  set  forth  above  make  evident 
that  Cohen  communicated  with  members  of  the  Trump  campaign  about  his  negotiation  with 
Clifford’s  attorney  and  the  need  to  preelude  Clifford  from  making  a  statement  that  would  have 
reflected  negatively  on  the  candidate  in  advance  of  the  forthcoming  election. 

C.  Probable  Cause  Justifying  Search  of  the  Subject  Premises  and  Subject  Devices 

45.  Based  on  the  foregoing,  my  review  of  reeords  produced  pursuant  to  subpoenas  and 
the  Cohen  Kmai!  Warrants,  and  the  iCloud  Warrant,  and  my  training  and  experienee,  there  is 
probable  cause  to  believe  that  the  Subjeet  Premises  and  Subject  Devices  have  been  used  in 
furtherance  of  the  Subject  Offenses  and  are  likely  to  contain  instrumentalities,  evidence,  and  fruits 
of  the  Subject  Offenses.  Specifically,  there  is  probable  cause  to  believe  that  Cohen  permanently 
resides  at  Subject  Premises-1  and,  at  least  in  part,  works  at  both  Subject  Premises-1  and  Subject 
Premises-2,  and  that  those  locations  contain  evidence  relating  to  the  Sterling  taxi  medallion 
transaction,  Cohen’s  assets,  Cohen’s  consulting  work  for  Essential  Consultants  LLC,  and  his 
payment  to  Clifford.  Additionally,  there  is  probable  cause  to  believe  that  Subject  Premises-3 
contains  evidence  of  Cohen’s  assets  and  his  payment  to  Clifford.  Finally,  there  is  probable  cause 
to  believe  that  Subject  Premises-4,  in  which  Cohen  is  temporarily  residing,  contains  electronic 
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devices,  including  Subject  Device- 1  and  Subject  Device-2,  which,  in  turn,  contain  evidence  of  the 
Subject  Offenses,  such  as  evidence  relating  to  the  Sterling  taxi  medallion  transaction,  Cohen’s 
assets,  Cohen’s  consulting  work  for  Essential  Consultants  LLC,  and  his  payment  to  Clifford. 

46 .  First,  there  is  probable  cause  to  believe  that  Cohen  lives  and  operates  his  businesses, 
at  least  in  part,  at  Subject  Premises-1 .  Specifically,  from  my  review  of  property  records,  I  know 
that  Michael  Cohen  and  Laura  Cohen  own  (in  trust)  Subject  Premises-1.  From  my  review  of 

Cohen’s  tax-retumsy-I  know-he  lists-his-primary-residenee  as  SubjecLPremises-l—Additionallys- 

from  my  review  of  emails  produced  pursuant  to  the  Cohen  Email  Warrants,  I  know  that  Cohen 
routinely  refers  to  Subject  Premises-1  as  his  home.  For  example,  on  or  about  September  28,  2017 
and  October  6,  2017,  Cohen  emailed  individuals  that  his  home  address  is  the  address  for  Subject 
Premises-1.  I  also  know  from  my  review  of  emails  that  Cohen  receives  package  delivery 
notifications  that  list  Cohen’s  address  as  the  address  for  Subject  Premises-1.  Cohen  has  also 
provided  the  address  of  Subject  Premises-1  as  the  address  for  Essential  Consultants  and  Michael 
D.  Cohen  &  Associates,  P.C.  For  example,  the  certificates  of  incorporation  and  account  opening 
documents  at  First  Republic  for  both  entities  list  their  addresses  as  the  address  for  Subject 
Premises-1.  See  supra  18(b),  18(d).  The  consulting  agreement  between  Essential  Consultants 
and  AT&T  also  indicated  the  address  for  Essential  Consultants  is  the  address  for  Subject  Premises- 
1.  See  supra\  \9(c). 

47.  There  is  also  probable  cause  to  believe  that  Subject  Premises-1  is  likely  to  contain 
instrumentalities,  evidence,  and  fruits  of  the  Subject  Offenses.  Specifically,  from  my  review  of 
emails  produced  pursuant  to  subpoena  and  the  Cohen  Email  Warrants  and  iCloud  Warrant,  as  well 
as  my  training  and  experience,  I  know  the  following: 
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a.  According  to  records  maintained  by  Sterling,  the  address  for  all  of  Cohen’s  taxi 
medallion  LLCs  is  the  address  for  Subject  Premises-1.  See  supra  16(c).  Additionally,  the 
medallion  loan  documents  indicate  that  any  mailings  related  to  the  loans  should  be  sent  to  Subject 
Premises-1.  See  id.  Based  on  my  training  and  experience,  as  well  as  my  review  of  public  sources, 
I  know  that  individuals  keep  records  of  properties  and  assets  in  which  they  have  ownership 
interests.  Accordingly,  I  submit  that  Subject  Premises-1  likely  contains  evidence  of  Cohen’s 

ownership-of^the  taxi  medallion-LLGSj^the  revenue- that  those  medaUions-generate,-and- the 

transaction  with  Sterling  in  2014  to  re-fmance  the  medallion  loans  that  were  then  with  Capital  One 
Bank. 

b.  From  my  review  of  records  maintained  by  Sterling,  I  also  know  that  Sterling 
addressed  documents  relating  to  the  ^^^^^^^^transaction  and  Cohen’s  attempts  to  modify  the 
terms  of  the  medallion  loans  to  Subject  Premises-1.  For  instance.  Sterling  addressed  the 
transaction  term  sheet,  see  supra  T|  16(1),  and  its  demand  letter  and  notice  of  default,  see  supra  ^ 
16(q),  to  Subject  Premises-1.  Accordingly,  Subject  Premises-1  likely  contains  evidence 
concerning  the  ^^^^^^ransaction  and  Cohen’s  negotiations  with  Sterling.  Some  of  those 
records — such  as  records  relating  to  a  payment  from  Cohen  to^^^^^^|-were  concealed  &om 
Sterling  and  cannot  be  obtained  via  subpoena  to  Sterling.  Additionally,  even  where  documents 
were  sent  to  Cohen  by  Sterling  (and  therefore  are  available  from  Sterling  via  subpoena),  the  fact 
that  they  may  be  found  in  Subject  Premises-1  will  be  relevant  to  Cohen’s  possession  or  Icnowledge 
of  the  documents. 

c.  From  my  review  of  records  maintamed  by  First  Republic,  I  know  that  Cohen 
provided  the  address  for  Subject  Premises-1  as  the  mailing  addresses  for  the  Essential  Consultants 
Account  and  MDC&A  Account.  See  supra  TfH  18(b),  18(e).  Accordingly,  it  is  likely  that  Subject 
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Premises-1  contains  records  relating  to  the  Essential  Consultants  Account  and  MDC&A  Account, 
including,  among  other  things,  account  opening  documents,  bank  statements,  documents  provided 
as  part  of  the  know-your-customer  process,  any  notes  made  by  Cohen  when  he  was  opening  the 
accounts,  wire  transfer  records,  and  canceled  checks.  Even  where  these  records  can  be  obtained 
from  First  Republic,  the  fact  that  they  may  be  found  in  Subject  Premises-1  will  be  relevant  to, 
among  other  things,  Cohen’s  ownership  of  the  accounts,  or  his  knowledge  of  transactions  or  the 
existence  of  funds  in  accounts. 

d.  Based  on  my  review  of  records  maintained  by  Capital  One  Bank,  TD  Bank,  Morgan 
Stanley,  City  National  Bank,  Signature  Bank,  and  Bethpage  Credit  Union,  I  loiow  that  Cohen 
provided  the  address  for  Subject  Premises-1  as  the  mailing  for  his  accounts  at  each  of  these 
financial  institutions.  Accordingly,  it  is  likely  that  Subject  Premises-1  contains  records  relating  to 
these  accounts,  including,  among  other  things,  bank  statements  that  list  account  balances.  The 
existence  of  these  records  in  Subject  Premises-1  will  be  relevant  to,  among  other  things,  Cohen  s 
ownership  of  the  accounts  and  his  knowledge  of  the  balances  in  these  accounts. 

e.  Additionally,  Cohen  may  have  records  of  other  bank  accounts  or  assets  that  were 
not  disclosed  to  Sterling  and  are  not  presently  known  by  law  enforcement.  For  example,  as 
described  above,  Cohen  has  received  interest  income  since  2015  that  he  has  not  disclosed  to 
Sterling  or  paid  taxes  on.  Also,  on  Cohen’s  August  2014  Financial  Statement,  supra  16(e), 
he  disclosed  $10,000,000  in  “investments  in  overseas  entities.”^^’  The  value  of  these  investments 
was  omitted  from  subsequent  financial  statements.  However,  for  the  reasons  outlined  above,  there 
is  probable  cause  to  believe  that  Cohen  omitted  the  value  of  those  investments  from  his  2017 

Based  on  my  participation  in  an  interview  with  Sterling  Employee-3, 1  have  learned  that 
Cohen  told  Sterling  Employee-3  that  the  reference  to  “investments  in  overseas  entities”  on  his 
2014  Financial  Statement  was  to  serve  merely  as  a  “placeholder”  for  potential  future  investments. 
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financial  statements  in  order  to  understate  his  assets.  As  Subject  Premises- 1  is  Cohen’s  primary 
residence  and  he  uses  Subject  Premises- 1  as  the  mailing  address  for  bankrecords,  there  is  probable 
cause  to  believe  that  account  statements  for  unknown  bank  accounts  or  assets  concealed  from 

Sterling  are  likely  to  be  found  in  Subj  ect  Premises- 1 . 

f.  Based  on  my  review  of  records  maintained,  by  AT&T  and  produced  pursuant  to  the 

Cohen  Email  Warrants,  I  know  that  the  address  Cohen  provided  to  AT&T  for  Essential  Consultants 
is  the  addresslor  Subject  Premises- 1.  '5'^Tw]?fFirr9‘(c)T'Therefore,  te 

believe  that  Subject  Premises-1  will  contain  evidence  concerning  die  operation  of  Essential 
Consultants  or  money  that  Cohen  received,  through  Essential  Consultants,  firom  AT&T. 
Additionally,  because  Cohen  used  the  address  for  Subject  Premises-1  for  at  least  one  consulting 
arrangement  involving  Essential  Consultants,  there  is  probable  cause  to  believe  that  Subject 
Premises-1  may  contain  records  of  other  consulting  arrangements  diat  Cohen,  through  Essential 

Consultants,  has  with  other  individuals  or  entities. 

g.  Based  on  my  review  of  records  maintained  by  Getzel’ s  accounting  firm,  and  emails 

produced  pursuant  to  the  Cohen  Email  Warrants,  I  have  learned  that  Getzel’s  accountmg  firm  sent 
documents  to  Subject  Premises-1  and  used  the  address  for  Subject  Premises-1  as  the  address  listed 
on  Cohen’s  personal  and  corporate  tax  returns.  See  supra  ^  16(n).  For  instance,  on  or  about 
October  6,  2017,  an  employee  at  Getzel’s  accounting  firm  emailed  Cohen  that  she  had  sent 
Cohen’s  September  2017  Financial  Statement  by  FedEx  to  Cohen’s  attention.  Accordingly, 

Cohen’s  tax  records  are  likely  to  be  found  in  Subject  Premises-1. 

h.  Based  on  my  review  of  bank  records  and  publicly-available  documents,  I  Icnow  that 

Cohen  used  $130,000  from  a  home  equity  line  of  credit  on  Subject  Premises-1  to  pay  Clifford.  I 
also  know  that  on  the  settlement  and  nondisclosure  agreement  between  “Peggy  Peterson”  and  “EC, 
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LLC,”  the  address  for  Essential  Consultants  is  Subject  Premises-1.  Accordingly,  Subject 
Premises- 1  is  lilcely  to  contain  evidence  of  the  Campaign  Finance  Offenses,  including  settlement 
and  nondisclosure  agreements,  payment  records,  written  and  email  correspondence,  and  records 
pertaining  to  the  home  equity  line  of  credit. 

i.  Based  on  my  review  of  emails  produced  pursuant  to  the  Cohen  Email  Warrants  and 
iCloud  Warrant,  I  know  that  Cohen  used  at  least  one  Apple  iPhone,  an  Apple  iPad  Mini,  and  a 
■MacBookrPro  to^access-his  iCloud  accountT-Based  on  my  review  of  location  records  pro vided-by- 
Apple  pursuant  to  the  iCloud  Warrant,  I  know  that  electronic  devices  linked  to  Cohen’s  iCloud 
account  were  used  at  Subject  Premises-1  to,  among  other  things,  place  telephone  calls  and  backup 
files  to  Cohen’s  iCloud  account.  Accordingly,  there  is  probable  cause  to  believe  that  Subject 
Premises-1  contains  electronic  devices,  including  certain  Apple  products,  that  for  reasons 
discussed  below  are  likely  to  contain  evidence  of  the  Subject  Offenses. 

j.  Based  on  my  review  of  emails  produced  pursuant  to  the  Cohen  Email  Warrants,  I 
understand  that  Subject  Premises-1  recently  sustained  water  damage  to  certain  parts  of  the 
premises,  and  that  Cohen  has  engaged  contractors  to  perform  certain  remediation  work  on  the 
premises.  In  addition,  as  set  forth  above,  I  believe  that  Cohen  and  his  family  are  temporarily 
residing  at  Subject  Premises-4  in  the  Loew’s  Regency  Hotel,  which  is  approximately  two  blocks 
from  Subject  Premises-1.  However,  based  on  my  review  of  a  work  order  sent  to  Cohen’s  email 
by  a  contractor,  I  understand  that  the  first  phase  of  the  work  order  called  for  the  contractor  to  “Pack 
&  Remove  all  items  &  furnishings  in  Living  Room,  Kitchen,  Sons  Room  &  Dining  Room”  and 
store  them  off-site.  In  addition,  based  on  my  review  of  drawings  sent  to  Cohen  by  the  contractor, 
it  appears  that  the  work  is  primarily  being  done  in  these  rooms.  Thus,  1  believe  that  the 
construction  -  to  the  extent  it  is  still  ongoing  -  would  not  necessarily  have  caused  Cohen  to  move 
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all  documents  or  evidence  responsive  to  the  warrant  out  of  Subject  Premises- 1,  because  it  does  not 
appear  that  work  is  being  done  to  the  portion  of  Subject  Premises-1,  such  as  a  home  office  or 
Cohen’s  own  room,  where  such  documents  or  evidence  would  most  likely  be  found.^^ 

48.  Second,  there  is  probable  cause  to  believe  that  Cohen  uses  Subject  Premises-2  as 
office  space,  and  also  that  Subject  Premises-2  contains  certain  electronic  devices.  Specifically, 
from  my  review  of  the  “strategic  alliance  agreement”  between  Squire  Patton  Boggs  and  Cohen, 
-and-my^review  of  the  press-release  on- Squire  Patton-Boggs’s-website,  I  know-that-Cohen  has  an_ 
office  at  Subject  Premises-2.  See  supra  HTf  18(d),  19(e).  Indeed,  I  have  learned  that  pursuant  to 
Cohen’s  agreement  with  the  law  firm,  he  has  “dedicated  and  segregated  office  space”  in  Squire 
Patton  Boggs’s  offices  on  the  23rd  floor  of  30  Rockefeller  Plaza,  and  that  the  space  is  “physically 
separate”  from  the  firm’s  offices  and  has  “locked  doors  and  its  own  locked  file  cabinets.”  See 
supra  Tf  19(e).  Additionally,  I  know  that  under  the  terms  of  the  agreement,  Cohen  agreed  to 
“arrange  for  [his]  own  computer  server  system  that  is  not  connected  to  [Squire  Patton  Boggs’s] 
computer  network  system.”  I  know  from  my  participation  in  an  interview  with  Getzel,  who  met 
Cohen  at  Subject  Premises-2  in  2017,  that  Subject  Premises-2  is  an  office  with  a  door,  it  appears 
to  be  used  only  by  Cohen,  and  it  contains,  among  other  things,  a  computer  and  paper  files. 
According  to  Getzel,  when  Getzel  saw  Cohen  at  Subject  Premises-2,  he  had  two  cellular 
telephones  in  Subject  Premises-2.  I  also  Icnow  from  my  review  of  emails  produced  pursuant  to  the 
Cohen  Email  Warrants  that  Cohen  uses  the  address  for  Subject  Premises-2  in  the  signature  block 

As  noted  below,  based  on  my  training  and  experience,  I  believe  that  individuals  who  travel  or 
stay  in  hotels  for  short-term  periods  commonly  bring  some  items  with  them,  such  as  portable 
electronic  devices  or  sensitive  items,  meaning  that  Cohen  has  likely  taken  some  evidence  from 
Subject  Premises-1  to  Subject  Premises-4.  Nevertheless,  given  the  temporary  nature  of  Cohen’s 
stay  at  Subject  Premises-4  and  the  scope  of  the  work  being  done  at  Subject  Premises-1, 1  believe 
it  is  unlikely  that  Cohen  has  taken  all  evidence  that  would  be  subject  to  seizure  out  of  Subject 
Premises-1. 
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on  his  emails.  Based  on  my  review  of  notes  of  a  call  between  Cohen  and  First  Republic  Employee- 
2  (which  notes  were  taken  by  another  First  Republic  employee,  who  was  participating  in  the  call 
and  taking  notes),  I  loiow  that,  on  or  about  November  15,  2017,  Cohen  told  First  Republic 
Employee-2  that  he  had  a  new  office  at  30  Rock.  Moreover,  I  Icnow  from  an  article  in  Vanity  Fair 
published  on  or  about  February  14, 2018,  that  Cohen  was  interviewed  by  the  magazine  in  Subject 
Premises-2  in  or  about  F ebruary  2018. 

_ 49.  There  is  also  probable  cause  to  believe  that  SubjectPremises-2  is  likelyjto  contain, 

instrumentalities,  evidence,  and  fruits  of  the  Subject  Offenses.  Specifically,  from  my  review  of 
'  emails  produced  pursuant  to  subpoena  and  the  Cohen  Email  Warrants  and  iCloud  Warrant,  as  well 
as  my  training  and  experience,  I  know  the  following: 

a.  According  to  records  maintained  by  Sterling,  when  Cohen  was  emailing  with 
Sterling  Employee-3  in  2018  about  a  modification  to  his  existing  loan  from  Sterling,  Cohen  listed 
his  address  in  his  email  as  the  address  for  Subject  Premises-2.  See  supra  Tf  16(t),  16(u). 
Accordingly,  Subject  Premises-2  likely  contains  evidence  concerning  Cohen’s  loan  modification 
negotiations  with  Sterling. 

b.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
know  that  the  address  Cohen  provided  to  KAJ  and  BTA  for  Essential  Consultants  is  the  address 
for  Subject  Premises-2.  See  supra  TITj  19(a),  19(b).  Therefore,  there  is  probable  cause  to  believe 
that  Subject  Premises-2  will  contain  evidence  concerning  the  operation  of  Essential  Consultants 
or  money  that  Cohen  received,  through  Essential  Consultants,  from  KAI  and  BTA,  among  other 
entities  with  which  Cohen  had  a  consulting  arrangernent.  Additionally,  based  on  my  review  of 
emails  sent  in  2018  that  were  obtained  pursuant  to  the  Cohen  Email  Warrants,  I  know  that  Cohen 
continues  to  enter  into  consulting  arrangements  through  Essential  Consultants,  and  agreements 
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relating  to  those  arrangements  indicate  that  Essential  Consultants  is  located  at  Subject  Premises- 
2.  Additionally,  because  Cohen  used  the  address  for  Subject  Premises-2  for  multiple  consulting 
arrangements  involving  Essential  Consultants,  there  is  probable  cause  to  believe  that  Subject 
Premises-2  may  contain  records  of  other  unknown  consulting  arrangements  that  Cohen  has  with 
other  individuals  or  entities. 

c.  Based  on  my  review  of  records  maintained  by  GetzeP  s  accounting  firm,  and  emails 
produced  pursu^o  the  CoheiTErSaTi  mrlaiiti^Ts-^lRslEy^^ 

Getzel,  I  have  learned  that  Getzel  visited  Subject  Premises-2  to  meet  with  Cohen  about  his  taxes. 
See  supra  20(a).  At  that  meeting,  Getzel  discussed  with  Cohen  whether  Cohen  should  disclose 
Essential  Consultants  on  his  personal  financial  statement  to  banks.  According,  there  is  probable 
cause  to  believe  that  Subject  Premises-2  will  contain  evidence  relating  to  Cohen’s  taxes,  or  notes 
of  his  conversation  with  Getzel.  Moreover,  the  fact  that  Cohen  used  Subject  Premises-2  for  a 
meeting  regarding  his  personal  financial  matters  provides  probable  cause  to  believe  that  documents 
and  information  regarding  his  finances  will  be  found  in  Subject  Premises-2. 

d.  Based  on  my  participation  in  an  interview  with  Getzel,  I  know  that  Cohen  maintains 
a  computer  in  Subject  Premises-2.  From  my  review  of  IP  data  produced  pursuant  to  a  subpoena 
and  pen  register  to  Google,  it  appears  that  Cohen  is  logging  into  his  Gmail  account  fi:om  Subject 
Premises-2.  Accordingly,  there  is  probable  cause  to  believe  that  Subject  Preniises-2  contains 
elecU-onic  devices,  that  for  reasons  discussed  below  are  likely  to  contain  evidence  of  the  Subject 

.  Offenses. 

e.  Based  upon  my  training  and  experience,  I  have  learned  that  individuals  who 
maintain  businesses  lypically  keep  records  relating  to  the  business— such  as  contracts  with  clients 
and  records  of  payments — ^at  the  business’  identified  location.  I  am  not  aware  of  any  addresses 
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associated  with  Essential  Consultants  other  than  Subject  Premises-1  and  Subject  Premises-2. 
Accordingly,  there  is  probable  cause  to  believe  that  Subject  Premises-1  and  Subject  Premises-2 

will  contain  business  records  for  Essential  Consultants. 

50.  Third,  there  is  probable  cause  to  believe  that  Subject  Premises-3  is  likely  to  contain 

instrumentalities,  evidence,  and  fruits  of  the  Subject  Offenses.  In  particular. 

a.  As  noted  above,  Cohen  has  two  bank  accounts  at  TD  Bank.  In  or  about  November 
lol^as  Cohen  was  receiving  substantiafincome  from  cbhsmting  wmk=whiehhe  didmoTdiselose 
to  Sterling— Cohen  opened  the  safety  deposit  box  at  TD  Bank,  which  is  Subject  Premises-3.  In 
light  of  the  aforementioned  evidence  that  Cohen  conceals  assets,  including  assets  at  TD  Bank, 
there  is  probable  eause  to  believe  that  Subject  Premises-3  contains  financial  assets,  objeets  of  value 
and/or  documents  relating  to  such  assets  or  objects  of  value  that  Cohen  likely  did  not  diselose  to 
Sterling.  Indeed,  based  on  my  training  and  experience,  I  am  aware  that  people  often  coneeal 
valuable  items  in  safety  deposit  boxes.  Accordingly,  there  is  probable  cause  to  believe  that  Subjeet 

Premises-3  will  contain  evidence  of  the  Bank  Fraud  Offenses. 

b.  In  addition,  based  on  my  review  of  records  produced  by  TD  Bank,  I  know  that 
Cohen  has  accessed  the  vault  in  which  Subject  Premises-3  is  stored  on  two  occasions.  The  first 
sueh  occasion  was  on  November  10,2017.  Cohen  signed  into  the  vault  at  approximately  5:35  and 

out  of  vault  at  approximately  5:39  on  that  date.^^  g^sed  on  my  review  of  toll  records,  I  know  that 
Cohen’s  first  call  after  he  signed  out  of  the  safety  deposit  box  -  approximately  45  mmutes  later  - 
was  to  Keith  Davidson.  Specifically,  at  6:25  p.m.  Cohen  called  Davidson  and  they  spoke  for  less 
than  a  minute;  three  minutes  later,  Davidson  called  Cohen  back  and  they  spoke  for  approximately 

52  The  entry  in  the  banlc’s  log  book  does  not  specify  whether  this  is  A,M.  or  P.M.  However,  I  infer 
that  it  is  P.M.,  because  it  is  unlikely  that  the  bank  would  have  been  open  at  5:35  and  5:39  a.m. 
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22  minutes.  The  second  such  occasion  was  on  February  2,  2018,  which  is  during  the  time  period 
numerous  media  reports  about  Cohen’s  payment  to  Clifford  were  being  published,  and  is  one  day 
after  it  appears  that  Cohen’s  family  moved  into  Subject  Premises-4,  as  set  forth  above.  The  tiimng 
of  Cohen’ s  two  visits  to  the  vault  -  one  shortly  before  a  call  to  Keith  Davidson  and  the  other  around 
the  time  that  Cohen  came  under  media  scrutiny  in  connection  with  the  payment  to  Davidson’s 
client  -  gives  rise  to  probable  cause  to  believe  that  Subject  Premises-3  will  contain  evidence  of  the 
Campaign  Finance  Offenses,  such  as  docurnehtTfblewnf To  Keith 

Davidson  and  the  payment  to  Clifford,  including  documents  or  evidence  that  Cohen  did  not  want 

to  leave  in  his  apartment  where  construction  workers  would  be  present.^^ 

5 1 .  Based  on  my  review  of  emails  obtained  pursuant  to  the  Cohen  Email  Warrants  and 
cellphone  location  information,  I  believe  that  Cohen  is  temporarily  residing  in  Subject  Premises- 
4.  See  supra  3(d).  There  is  also  probable  cause  to  believe  that  Subject  Premises-4  contains 

instrumentalities  and  evidence  of  the  Subject  Offenses,  including,  the  following: 

a.  As  described  above,  it  appears  that  Cohen  moved  to  Subject  Premises-4  on  or  about 
February  1,  2018,  at  which  time  numerous  media  reports  about  Cohen’s  involvement  in  the 
payment  to  Clifford  were  being  published.  supra  3(d).  During  this  time  same  period, 
Cohen  was  frequently  corresponding  with  the  media  and  sent  himself  and  others  statements  about 
his  involvement  in  the  payment  to  Clifford.  supra  42(a)-(c).  Thus,  there  is  probable  cause 
that  Cohen  took  at  least  some  documents  and  evidence  relating  to  the  Clifford  payment  with  him 
to  Subject  Premises-4,  in  order  to  reference  and  consult  them  in  connection  with  these  statements. 


33  As  noted  above.  Subject  Premises-3  is  approximately  five  inches  by  ten  inches.  Accordmgly,  I 
do  not  believe  that  it  would  fit  a  large  volume  of  hard  copy  documents;  however,  a  small  number 
of  hard-copy  documents,  or  a  large  volume  of  documents  contained  on  a  flash  drive  or  othei 
portable  storage  device,  would  fit  in  Subject  Premises-3. 
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b.  As  described  above,  at  the  time  Cohen  moved  to  Subject  Premises-4,  he  was  also 
in  the  midst  of  ongoing  negotiations  with  Sterling  regarding  the  refinancing  of  his  medallion  debts. 
For  example,  on  January  3  0, 20 1 8 ,  Cohen  had  a  lengthy  phone  call  with  Sterling  Employee-3  about 
his  finances  and  the  proposed  restructuring,  and  on  February  1,  2018,  Cohen  sent  an  email  to 
Sterling  Employee-3  claiming  that  he  did  not  have  more  than  $1.25  million  in  cash.  See  supra 

1 6(u).  Thus,  there  is  probable  cause  that  Cohen  took  at  least  some  documents  and  evidence  relating 
to  his  ongoing  negotiations  with  Sterling-with  him  to  Subj  ect  Premises-4rin  order  to  referenee-and- 
consult  them  in  connection  with  these  negotiations. 

c.  As  described  above,  Cohen  used  at  least  one  Apple  iPhone,  an  Apple  iPad  Mini, 
and  a  MacBook  Pro  to  access  his  iCloud  account,  and  these  electronic  devices  linked  to  Cohen’s 
iCloud  account  were  used  at  Subject  Premises-1  -  Cohens’  permanent  residence  -  to  place 
telephone  calls  and  backup  files  to  Cohen’s  iCloud  account.  See  supra  47(i).  Although  Cohen’s 
stay  at  Subject  Premises-4  is  temporary,  based  on  my  training  and  experience  I  know  that 
individuals  who  travel  or  stay  in  hotels  for  short-term  periods  commonly  bring  portable  electronic 
devices  with  them,  such  as  cellular  phones,  tablets,  or  laptops.  Accordingly,  there  is  probable 
cause  to  believe  that  Subject  Premises-4,  where  Cohen  currently  appears  to  be  residing,  contains 
electronic  devices,  including  Subject  Device- 1,  Subject  Device-2,  and/or  certain  Apple  pi'oducts, 
that  for  the  reasons  discussed  herein  are  likely  to  contain  evidence  of  the  Subject  Offenses. 

d.  Moreover,  as  set  forth  above,  based  on  cellphone  location  information  I  know  that 
Subject  Device-1  and  Subject  Device-2  were  in  the  vicinity  of  Subject  Premises-4  as  recently  as 
this  morning  (April  8,  2018).  As  set  forth  above,  there  is  probable  cause  to  believe  that  Cohen 
used  the  Subject  Devices  in  furtherance  of  the  Subject  Offenses,  including  to  communicate  with 
Sterling  employees  regarding  the  medallion  transaction,  with  First  Republic  employees  regarding 
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the  Essential  Consultants  Account,  with  his  accountant  regarding  his  finances,  and  with 
individuals,  such  as  Davidson,  Howard  and  Pecker,  involved  in  the  $130,000  payment  to  Clifford. 

52.  Although  Cohen  appears  to  be  residing  currently  in  Subject  Premises-4,  it  is 
unknown  whether  Cohen  will  be  physically  present  within  Subject  Premises-4  at  the  moment  the 
warrant  sought  herein  are  executed.  If  Cohen  is  within  Subject  Premises-4  at  that  moment.  Subject 
Device-1  and  Subject  Device-2  -  his  cellphones  -  will  likely  also  be  within  Subject  Premises-4. 

IfCcihdniknot within  Subject Premis^es-A'at that momenf,Ahe  dwice™ilitely  be^^^^^^ 

wherever  he  is  located  (which,  based  on  location  data  for  Subject  Device-1  and  Subject  Device-2 
as  recently  as  today,  is  likely  to  be  in  the  Southern  District  of  New  York).  As  such,  this  warrant 
seeks  separate  authority  to  seize  Subject  Device-1  and  Subject  Device-2,  in  the  event  that  those 
devices  are  not  located  within  Subject  Premises-4  (or  another  Subject  Premises)  at  the  moment  the 
warrants  sought  herein  are  executed. 

D.  Probable  Cause  Justifying  Search  of  ESI 

53.  Based  on  the  foregoing,  there  is  probable  cause  to  believe  that  Subject  Premises-1, 

Subject  Premises-2  and  Subject  Premises-4  contain  electronic  devices  that  are  lilcely  to  contain 
evidence,  fruits,  and  instrumentalities  of  the  Subject  Offenses  (and,  as  set  forth  above,  that  Subject 
Device-1  and  Subject  Device-2  are  themselves  electronic  devices  that  are  likely  to  contam 
evidence  of  the  Subject  Offenses).  Specifically,  based  on  my  review  of  information  produced 
pursuant  to  the  Cohen  Email  Warrants,  the  iCloud  Warrant,  and  subpoenas,  as  well  as  pen  register 
data,  I  submit  that  there  is  probable  cause  that  Subject  Premises-1  contains  an  Apple  iPad  Mini,  a 
MacBook  Pro,  and  has,  at  various  times,  contained  Apple  cellphones;  similarly,  there  is  probable 
cause  that  Subject  Premises-2  contains  a  computer  and  has,  at  various  times,  contained  Apple 
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cellphones.  These  devices  are  likely  to  include  evidence,  fruits,  and  instrumentalities  of  the 
Subject  Offenses  for  the  following  reasons: 

a.  As  described  throughout  this  affidavit,  Cohen  used  email  to  send  and  receive 
communications  related  to  the  Subject  Offenses.  In  particular,  Cohen  used  email  to  send  and 
receive  communications  with  Sterling,  First  Republic,  Getzel,  the  entities  to  which  he  is  providing 
consulting  services,  Davidson,  and  Howard,  among  others.  While  some  of  these  emails  have 

already  heemobtained  via’subpbenas  and  search  warrantsrfknow  from  my  training  and^experience 

that  individuals  can  and  do  delete  emails  from  their  Internet-based  inboxes  but  retain  copies  of 
those  emails  on  their  hard  drives.  I  also  luiow  that  individuals  often  have  multiple  email  accounts, 
some  of  which  may  not  be  known  to  law  enforcement,  and  as  a  result  electronic  devices  can  be  a 
unique  repository  of  all  emails  relevant  to  certain  Subject  Offenses.  Indeed,  from  my  involvement 
in  this  investigation,  I  know  that  Cohen  had  an  email  account  with  the  Trump  Organization,  but 
the  USAO  and  FBI  have  not  been  able  to  obtain  the  contents  of  that  account  to  date.  Thus,  emails 
relevant  to  the  Subject  Offenses  are  likely  stored  on  electronic  devices  in  Subject  Premises-1, 
Subject  Premises-2  and/or  Subject  Premises-4. 

b.  Additionally,  Subj  ect  Premises- 1 ,  Subj  ect  Premise-2  and  Subj  ect  Premises-4  likely 
contain  electronic  copies  of  documents  relevant  to  the  Subject  Offenses.  Indeed,  I  know  from  my 
training  and  experience  that  individuals  often  retain  copies  of  important  documents  on  their 
computers  or  other  electronic  devices  capable  of  storing  information,  including  cellphones  (such 
as  the  Subject  Devices)  and  tablets.  Here,  there  are  a  number  of  documents  that  Cohen  has  likely 
retained  that  will  be  relevant  to  the  Subject  Offenses.  For  example,  electronic  devices  may  include 
documentation  of  Cohen’s  true  net  worth,  a  listing  of  his  assets,  an  accounting  of  his  available 
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cash,  consulting  agreements  with  third  parties,  and  documentation  of  his  payment  to  Clifford, 

among  other  evidence  of  the  Subject  Offenses. 

c.  Third,  I  know  from  my  review  of  emails  obtained  pursuant  to  the  Cohen  Email 

Warrants  that  Cohen  sent  up  online  banking  with  First  Republic.  Based  on  my  training  and 
experience,  I  know  that  individuals  who  set  up  online  banking  often  receive  electronic  notices 
concerning  financial  transactions  and,  on  occasion,  save  records  of  their  financial  transactions  to 

i;^^esrA^cm^gl)rtire7eTsp^^^ 

contain  evidence  of  banking  activity,  including  the  existence  of  bank  accounts  or  assets  that  Cohen 
did  not  disclose  to  Sterling  or  Melrose. 

d.  Fourth,  from  my  review  of  records  produced  by  Apple,  I  know  that  Cohen 
communicates  using  text  message  as  well  as  encrypted  communications  applications.  These 
applications  that  Cohen  has  downloaded  onto  a  phone  include,  but  are  not  limited  to,  WhatsApp, 
Signal,  and  Dust.  I  know  from  my  review  of  toll  records  and  text  messages  that,  in  particular, 
Cohen  communicated  with  Pecker  using  these  encrypted  applications.  Accordingly,  there  is 
probable  cause  to  believe  that  Cohen’s  cellphones  -  the  Subject  Devices  -  will  contain  encrypted 
messages  that  are  not  otherwise  accessible  relating  to  the  Subject  Offenses. 

54.  Based  on  my  training  and  experience,  I  know  that  individuals  who  engage  in 
financial  crimes  commonly  use  computers  to  communicate  with  co-conspirators,  keep  fmancial 
ledgers,  and  retain  fraudulent  documents.  As  a  result,  they  often  store  data  on  their  computers 
related  to  their  illegal  activity,  which  can  include  logs  of  online  or  cellphone-based  “chats”  with 
co-conspirators;  email  correspondence;  contact  information  of  co-conspirators,  including 
telephone  numbers,  email  addresses,  and  identifiers  for  instant  messaging  and  social  medial 
accounts;  bank  account  numbers;  and/or  records  of  uses  of  funds. 


2017.08.02 


71 


Case  l:18-cr-00602-WHP  Document  48-1  Filed  07/18/19  Page  174  of  269 


55.  Based  on  my  training  and  experience,  I  also  know  that,  where  computers  are  used 
in  furtherance  of  criminal  activity,  evidence  of  the  criminal  activity  can  often  be  found  months  or 

even  years  after  it  occurred.  This  is  typically  true  because: 

•  Electronic  files  can  be  stored  on  a  hard  drive  for  years  at  little  or  no  cost  and.  users  thus 
have  little  incentive  to  delete  data  that  may  be  useful  to  consult  in  the  future. 

.  Even  when  a  user  does  choose  to  delete  data,  the  data  can  often  be  recovered  months 
or  years  later  with  the  appropriate  forensic  tools.  When  a  file  is  “deleted  on  a  home, 
computer  the  contained  in  the  file  does  not  actually  disappear,  but  instead  remains 
on  the  hard  drive,  in  “slack  space,”  until  it  is  overwritten  by  new  data  that  camot  be 
stored  elsewhere  on  the  computer.  Similarly,  files  that  have  been  viewed  on  Je  Internet 
are  generally  downloaded  into  a  temporary  Internet  directory  or  “cache,  which  is  only 
overwritten  as  the  “cache”  fills  up  and  is  replaced  with  more  recently  viewed  Internet 
pages.  Thus,  the  ability  to  retrieve  ftom  a  hard  drive  or  other  electronic  storage  me  la 
depends  less  on  when  the  file  was  created  or  viewed  than  on  a  particular  user  s 
operating  system,  storage  capacity,  and  computer  habits. 

•  In  the  event  that  a  user  changes  computers,  the  user  will  typically  tramfer  files  from 
the  old  computer  to  the  new  computer,  so  as  not  to  lose  data.  In  addition  users  often 
keep  backups  of  their  data  on  electronic  storage  media  such  as  thumb  dnves,  Has 
memory  cards,  CD-ROMs,  or  portable  hard  drives. 

56.  Based  on  the  foregoing,  I  respectfully  submit  there  is  probable  cause  to  believe  that 

Cohen  engaged  in  the  Subject  Offenses,  and  that  evidence  of  this  criminal  activity  is  likely  to  be 

found  in  the  Subject  Premises,  on  computers  and  electronic  media  found  in  the  Subject  Premises, 

and  on  the  Subject  Devices.  In  particular,  there  is  probable  cause  to  believe  that  the  Subject 

Premises  and  Subject  Devices  will  contain  evidence,  ftuits,  and  instrumentalities  of  violations  of 

the  Subject  Offenses,  as  more  fully  described  in  Section  II  of  Attachments  A,  B,  C,  D,  E  and  F  to 

the  proposed  warrants,  including  the  following: 

a.  Evidence  necessary  to  establish  the  occupancy  or  ownership  of  the  Subject 

Premises,  including  without  limitation,  utility  and  telephone  bills,  mail  envelopes,  addressed 
correspondence,  bank  statements,  identification  documents,  and  keys. 

b.  Evidence  relating  to  Sterling,  Melrose,  and/or  taxi  medallions. 
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c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Cohen  and/or  entities 
associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  tc^^^^H^d/or  entities  associated  with  him. 

d.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 

with  Sterling  and/or  Melrose. 

e.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 

indicate  thTnature  and  purp^e^f  pay^Tma^  to  or  ta  E^^SrCdn^lf^f^t^ 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

f.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 

g.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 

entities,  including  tax  returns,  personal  financial  statements,  and  bank  records. 

h.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

Cohen  and^^^^^H^nd  any  payments  fy^^Hto  Cohen. 

i.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  then- 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 

and  any  communications  related  to  such  agreements. 

j.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 

agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 
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k.  Evidence  of  communications  involving  Michael  Cohen,  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

l.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

m.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  thc~A^cess  Holl^o^  t^'  and  other  potentiil  sources  ofTtegatitre— 

publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

n.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 

payment  to  Clifford  or  others  in  connection  with  the  election. 

o.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 

contribution  reporting  requirements,  and  campaign  contribution  limits. 

p.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 

relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 

q.  Communications,  records,  documents,  and  other  files  reflecting  false 

representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 

i 

fmancial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 

financial  transactions  involving  that  financial  institution, 

r.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

HI.  Procedures  for  Searching  ESI 
A.  Execution  of  Warrant  for  ESI 

57.  Federal  Rule  of  Criminal  Procedure  41(e)(2)(B)  provides  that  a  warrant  to  search 

for  and  seize  property  “may  authorize  the  seizure  of  electronic  storage  media  or  the  seizure  or 
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copying  of  electronically  stored  information  ...  for  later  review.”  Consistent  with  Rule  41,  this 
application  requests  authorization  to  seize  any  computer  devices  and  storage  media  and  transport 
them  to  an  appropriate  law  enforcement  facility  for  review.  This  is  typically  necessary  for  a  number 
of  reasons: 


•  First,  the  volume  of  data  on  computer  devices  and  storage  media  is  often  impractical 
for  law  enforcement  personnel  to  review  in  its  entirety  at  the  search  location. 

•  Second,  because  computer  data  is  particularly  vulnerable  to  inadvertent  or  intentional 

modifi^tioh  orliestructim7“coffiputertevice's  are^rdeally"“examined  ima”^^^ 

environment,  such  as  a  law  enforcement  laboratory,  where  trained  personnel,  using 
specialized  software,  can  make  a  forensic  copy  of  the  storage  media  that  can  be 
,  subsequently  reviewed  in  a  manner  that  does  not  change  the  underlying  data. 

•  Third,  there  are  so  many  types  of  computer  hardware  and  software  in  use  today  that  it 
can  be  impossible  to  bring  to  the  search  site  all  of  the  necessary  technical  manuals  and 
specialized  personnel  and  equipment  potentially  required  to  safely  access  the 
underlying  computer  data. 

•  Fourth,  many  factors  can  complicate  and  prolong  recovery  of  data  ftom  a  computer 
device,  including  the  increasingly  common  use  of  passwords,  encryption,  or  other 
features  or  configurations  designed  to  protect  or  conceal  data  on  the  computer,  which 
often  take  considerable  time  and  resources  for  forensic  personnel  to  detect  and  resolve. 

58.  As  discussed  herein.  Squire  Patton  Boggs  is  a  functioning  law  firm  that  conducts 
legitimate  business  unrelated  to  Cohen’s  commission  of  the  Subject  Offenses.  Subject  Premises- 
2  is  an  office  located  inside  of  Squire  Patton  Boggs’s  New  York  office.  In  order  to  execute  the 
warrant  in  the  most  reasonable  fashion,  law  enforcement  personnel  will  attempt  to  investigate  on 
the  scene  of  what  computers  or  storage  media,  if  any,  must  be  seized  or  copied,  and  what  computers 
or  storage  media  need  not  be  seized  or  copied.  Law  enforcement  personnel  will  speak  with  Squire 
Patton  Boggs  personnel  on  the  scene  as  may  be  appropriate  to  determine  which  files  and  electronic 
devices  within  Subject  Premises-2  belong  to  or  were  used  by  Cohen.  While,  based  on  the 
foregoing,  it  does  not  appear  that  Cohen  shared  electronic  devices  or  a  server  with  Squire  Patton 
Boggs,  where  appropriate,  law  enforcement  personnel  will  copy  data,  rather  than  physically  seize 
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computers,  to  reduce  the  extent  ot  any  disruption  of  Squire  Patton  Boggs’s  operations.  If.  after 
inspecting  the  seized  computers  off-site,  it  is  determined  that  some  or  all  of  this  equipment  is  no 
longer  necessary  to  retrieve  and  preserve  the  evidence,  the  Government  will  return  It. 

59,  Additionally,  because  Cohen  is  an  attorney,  and  claims  to  serve  as  a  personal 
attorney  for  Trump,  the  review  of  evidence  seized  from  the  Subject  Premises  and  Subject  Devices 
will  be  conducted  pursuant  to  established  screening  procedures  to  ensure  that  the  law  enforcement 

prJsi^^vS^d  in  ieln^istiiatb^  teihdlriPtSiiSy^^ 

in  a  manner  reasonably  designed  to  protect  any  attorney-client  or  other  applicable  privilege.  When 
appropriate,  the  procedures  will  include  use  of  a  designated  “filter  team,”  separate  and  apart  from 
the  Investigative  team,  in  order  to  review  potentially  privileged  communications  and  determine 
which  communications  to  release  to  the  investigation  and  prosecution  team. 

B.  Accessing  ESI  on  the  Subject  Devices 

60.  As  described  above,  the  Subject  Devices  are  both  Apple  brand  devices. 

61.  I  know  from  my  training  and  experience,  as  well  as  from  information  found  m 
publicly  available  materials  including  those  published  by  Apple,  that  some  models  of  Apple 
devices  such  as  iPhones  and  iPads  offer  their  users  the  ability  to  unlock  the  device  via  the  use  of  a 
fingerprint  or  thumbprint  (collectively,  “fingerprint”)  in  lieu  of  a  numeric  or  alphanumeric 
passcode  or  password.  This  feature  is  called  Touch  ID.  I  also  know  that  the  Apple  iPhone  X  offers 
its  users  the  ability  to  unlock  the  device  via  the  use  of  facial  recognition  (through  infrared  and 
visible  light  scans)  in  lieu  of  a  numeric  or  alphanumeric  passcode  or  password.  This  feature  is 

called  Face  ID. 

62.  If  a  user  enables  Touch  ID  on  a  given  Apple  device,  he  or  she  ean  register  up  to  5 
fingerprints  that  can  be  used  to  unlock  that  device.  The  user  can  then  use  any  of  the  registered 
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fingerprints  to  unlock  the  device  by  pressing  the  relevant  finger(s)  to  the  device’s  Touch  ID  sensor, 
which  is  found  in  the  round  button  (often  referred  to  as  the  “home”  button)  found  at  the  bottom 
center  of  the  front  of  the  device.  If  a  user  enables  Face  ID  on  a  given  Apple  device,  he  or  she  can 
unlock  the  device  by  raising  the  iPhone  to  his  or  her  face,  or  tapping  the  screen.  In  my  training 
and  experience,  users  of  Apple  devices  that  offer  Touch  ID  or  Face  ID  often  enable  it  because  it  is 
considered  to  be  a  more  convenient  way  to  unlock  the  device  than  by  entering  a  numeric  or 
^Iphanurnefic  passcode  or  passwbfd,^s'welFaS'a  more  secure  way  to  protectthe  device  s  contents. 

63.  In  some  circumstances.  Touch  ID  or  Face  ID  cannot  be  used  to  unlock  a  device  that 
has  either  security  feature  enabled,  and  a  passcode  or  password  must  be  used  instead.  These 
circumstances  include;  (1)  when  the  device  has  just  been  turned  on  or  restarted,  (2)  when  more 
than  48  hours  has  passed  since  the  last  time  the  device  was  unlocked;  (3)  when  the  passcode  or 
password  has  not  been  entered  in  the  last  6  days,  and  the  device  has  not  been  unlocked  via  Touch 
ID  in  the  last  8  hours  or  the  device  has  not  been  unlocked  via  Face  ID  in  the  last  4  hours;  (4)  the 
device  has  received  a  remote  lock  command;  or  (5)  five  unsuccessful  attempts  to  unlock  the  device 
via  Touch  ID  or  Face  ID  are  made. 

64.  The  passcodes  or  passwords  that  would  unlock  the  Subject  Devices  are  not  known 
to  law  enforcement.  Thus,  it  will  likely  be  necessary  to  press  the  fingers  of  the  user  of  the  Subject 
Devices  to  the  devices’  Touch  ID  sensor,  or  hold  the  Subject  Devices  in  fi-ont  of  the  user’s  face  to 
activate  the  Face  ID  sensor,  in  an  attempt  to  unlock  the  devices  for  the  purpose  of  executing  the 
search  authorized  by  this  warrant.  Attempting  to  unlock  the  relevant  Apple  devices  via  Touch  ID 
with  the  use  of  the  fingerprints  of  the  user,  or  via  Face  ID  by  holding  the  device  in  front  of  the 
user’s  face,  is  necessary  because  the  government  may  not  otherwise  be  able  to  access  the  data 
contained  on  those  devices  for  the  purpose  of  executing  the  search  authorized  by  this  warrant. 
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65.  Based  on  these  facts  and  my  training  and  experience,  it  is  likely  that  Cohen  is  the 
user  of  the  Subject  Devices,  and  thus  that  his  fingerprints  are  among  those  that  are  able  to  unlock 
the  Subject  Devices  via  Touch  ID  or  his  face  is  able  to  unlock  the  Subject  Devices  via  Face  ID. 

66.  Although  I  do  not  loiow  which  of  a  given  user’s  10  fingerprints  is  capable  of 
unlocking  a  particular  device,  based  on  my  training  and  experience  I  know  that  it  is  common  for  a 
user  to  unlock  a  Touch  ID-enabled  Apple  device  via  the  fingerprints  on  thumbs  or  index  fingers. 

In  the  event  tola^nforcemenTiTunable'to ^  as  described- above 

within  the  five  attempts  permitted  by  Touch  ID,  this  will  simply  result  in  the  device  requiring  the 

entry  of  a  password  or  passcode  before  it  can  be  unlocked. 

67.  I  also  know  from  my  training  and  experience,  and  my  review  of  publicly  available 

materials  published  by  Apple  that  Apple  brand  devices,  such  as  the  Subject  Devices,  have  a  feature 
that  allows  a  user  to  erase  the  contents  of  the  device  remotely.  By  logging  into  the  Internet,  th 
user  or  any  other  individual  who  possesses  the  user’s  account  information  can  take  steps  to 
completely  wipe  the  contents  of  the  device,  thereby  destroying  evidence  of  criminal  conduct,  along 
with  any  other  information  on  the  device.  The  only  means  to  prevent  this  action  is  to  disable  the 
device’s  ability  to  connect  to  the  Internet  immediately  upon  seizure,  which  requires  either  access 
to  the  device  itself  to  alter  the  settings,  or  the  use  of  specialized  equipment  that  is  not  consistently 

available  to  law  enforcement  agents  at  every  arrest. 

68.  Due  to  the  foregoing,  I  request  that  the  Court  authorize  law  enforcement  to  press 

the  fingers  (including  thumbs)  of  Cohen  to  the  Touch  ID  sensors  the  Subject  Devices,  or  hold  the 
Subject  Devices  in  front  of  Cohen’s  face,  for  the  purpose  of  attempting  to  unlock  the  Subject 
Devices  via  Touch  ID  or  Face  ID  in  order  to  search  the  contents  as  authorized  by  this  warrant. 
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C.  Review  of  ESI 

69.  Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creauon 
of  forensic  image  copies,  law  enforcement  personnel  (including,  in  addition  to  law  enforcement 
officers  and  agents,  and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and 
related  proceedings,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel 
assisting  the  government  in  this  investigation,  and  outside  technical  experts  under  government 

“control)  will  r^Sw  the  ESI  contain^dteSlbFiaSrtSfflbTrrc^ 

70.  In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques 
to  determine  which  files  or  other  ESI  contain  evidence  or  fruits  of  the  Subject  Offenses.  Such 


techniques  may  include,  for  example: 

.  surveying  directories  or  folders  and  the  individual  fdes  they  contain  (analogous  to 
lookkig  ft  the  outside  of  a  file  cabinet  for  tire  markings  it  contains  and  opening  a  drawer 

believed  to  contain  pertinent  files); 

•  conducting  a  file-by-file  review  by  “opening”  or  reading  the  first  few  “pages”  of  such 
files  in  order  to  determine  their  precise  contents  (analogous  to  performing  a  cursory 
examination  of  each  document  in  a  file  cabinet  to  determine  its  relevance), 

.  “scanning”  storage  areas  to  discover  and  possibly  recover  recently  deleted  data  or 
deliberately  hidden  files;  and 

.  nerforming  electronic  keyword  searches  through  all  electronic  storage  areas  to 
determine  Ae  existence  and  location  of  data  potentially  related  to  the  subject  matter 

the  investigation^'^;  and 

.  reviewing  metadata,  system  information,  configuration  files,  registry  data  and  any 
other  infmmation  reflecting  how,  when,  and  by  whom  the  computer  was  used. 


34Kevword  searches  alone  are  typically  inadequate  to  detect  all  relevant  data.  For  one  thmg 

W  a  keyword  search  because  dre  iuform^ion  does  no, 

contain  the  keywords  being  searched. 
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71 .  Law  enforcement  personnel  will  make  reasonable  efforts  to  restrict  their  search  to 
data  falling  within  the  categories  of  evidence  specified  in  the  warrant.  Depending  on  the 
circumstances,  however,  law  enforcement  personnel  may  need  to  conduct  a  complete  review  of  all 
the  ESI  from  seized  devices  or  storage  media  to  evaluate  its  contents  and  to  locate  all  data 

responsive  to  the  warrant. 

D.  Return  of  ESI 

72.  If  the  Government  d^rmlne7that  the  electronic  devices  are  no-1onger necessary- 
to  retrieve  and  preseiwe  the  data,  and  the  devices  themselves  are  not  subject  to  seizure  pursuant  to 
Federal  Rule  of  Criminal  Procedure  41(c),  the  Government  will  return  these  items,  upon  request. 
Computer  data  that  is  encrypted  or  unreadable  will  not  be  returned  unless  law  enforcement 
personnel  have  determined  that  the  data  is  not  (i)  an  instrumentality  of  the  offense,  (ii)  a  fruit  of 
the  criminal  activity,  (iii)  contraband,  (iv)  otherwise  unlawfully  possessed,  or  (v)  evidence  of  the 

Subject  Offenses. 
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IV.  Conclusion  and  Ancillary  Provisions 

73.  Based  on  the  foregoing,  I  respectfully  request  the  court  to  issue  a  warrant  to  seize 
the  items  and  information  specified  in  Attachments  A,  B,  C,  D,  E  and  F  to  this  affidavit  and  to  the 
Search  and  Seizure  Warrants. 

74.  In  light  of  the  confidential  nature  of  the  continuing  investigation,  I  respectfully 

request  that  this  affidavit  and  all  papers  submitted  herewith  be  maintained  under  seal  until  the 
Court  orders“ofherwise:  ^  ~  ^ 


FBI 


Sworn  to  before  me  on 
8th  day  of  April,  2018 


HON.  HENRY  B.  PITMAN 

UNITED  STATES  MAGISTRATE  JUDGE 
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ATTACHMENT  A 

I.  Premises  to  be  Searched— Subject  Premises-1 

The  premises  to  be  searched  (“Subject  Premises-1”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein: 

Apartment^Hocated  inside  the  building  at  502  Park  Avenue  New  Yort  New  York 
10022.  X  buildi"ated  at  502  Park  Avenue  is  a  32-floor  brick  residential  building.  Subject 
Premises- 1  is  located  on  the^^^^floor  of  the  building. 

IL  Items  to  Be  Seized   


A  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from  Subject  Premises-1  are  evidence,  fmits,  and  inst^^ 
of  violations  of  18  U.S.C.  §§  371  (conspiracy,  as  it  pertains  to  the  IS® 

ffalse  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fiaud),  and  13 
«  fraud),  J  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 

contributions)  (the  “Subject  Offenses”),  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Banlc,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 

b  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  tc^^^^fland/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d  Evidence  relating  to  Essential  Consultants,  EEC,  including  any  documents  that 

indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  ^  ^ 

of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

e  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  Michael  D.  Cohen  & 
or  evidence  of  the  purpose  of  accounts  opened  m  the  name  of  Michael  D.  Cohen  &  Associates. 

f  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  throng 
entities!  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 

2013  to  the  present. 

Evidence  relating  to  agreements,  loans,  and/or  financial  trmsacaon^eta^ 

|ind/or  entities  controlled  by  the 


Cohen  andl 
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L  and  any  payments  by 


to  Cohen,  from  January 


1,  2012  to  the  present 


h  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  doeuments, 
and  any  eommunications  related  to  such  agreements. 

i.  Evidenee  of  communications  involving  Michael  Cohen,  Donald  Trump  an^or 
agents  or  assoeiates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDouga  ,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

Rvidenee  of  communications  between  Michael  Cohen  and  American  Media  Inc., 


_ __i  Kviaence  or  comnimii>..ai.iuiiJ  —  ... _ ^ _ _ 

"DaVid  Pecte,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephame 

Clifford,  and/or  Karen  MeDougal. 

k.  Evidenee  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

1  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  an^or  other 

relating  to  Cohen’s  banlc  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 

present. 

p.  Communications,  records,  documents,  and  other  files 
representations  to  a  financial  institution  related  to  the  intended  pui-pose  of  an  aeeount  or  loan  at 
tZt  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  aeeount;  or  (he 

financial  transactions  involving  that  financial  institution,  from  Januaiy  1, 2013  to  the  present 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-1  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  (fteS™ 
set  forth  in  Section  n.A  of  this  Attachment  above,  including,  but  not  limih^  to,  a  MacBoo  , 
a^  ote  destop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-1  also  include: 

1  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  information 

eoneeming-the-configuration  oTthe  seized  or  copied-Comp-Uter_deviC-es_or  storage  media. - - 

3.  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 


C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
persoimel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 


In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

•  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  marldngs  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

•  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

•  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

•  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  malce  reasonable  efforts  to  search  only  for  fhes 
documents  or  other  electronically  stored  information  within  the  categories  identified  m  ec  ion 
TT  A  and  TT  R  of  this  Attachment  However,  law  enforcement  personnel  are  authorized  to  conduc 

seized  devices  or  storage  media  if  necessa^to  evaluate 

contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be 

usLf  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  ad 
potential  privileges. 
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ATTACHMENT  B 


I.  Premises  to  be  Searched— Subject  Premises-2 

The  premises  to  be  searched  (“Subject  Premises-2”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein; 

An  office  belonging  to  or  assigned  to  Michael  Cohen  located  on  te  ^^rd  tor  of  tte 
building  at  30  Rookefeller  Plaza,  New  York,  New  York  10112,  inside  of  the  offices  of  the 
Squire  Patton  Boggs.  The  building  located  at  30  Rockefeller  Pta  is  a  66-tor  office  buildi  g 
that  spans  the  entire  block  between  Sixth  Avenue  and  Rockefeller  Plaza. 


n.  Items  to  Be  Seized 

A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from  Subject  Premises-2  are  ‘”Vnr”Tffio1 

of  violations  of  1 8  U.S.C.  §§371  (conspiracy  as  it  pertains  to  the 

tffllse  banlc  entries)  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”)  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Miehael 

entities  associated  with  him  to  transfer  any  interest  in  taxi  medalhons,  and  my  ^soctated  debts 
“abilities,  to  others,  including  ““““ 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential 

of  any  work  done  by  Cohen  or  any  other  individuals  m  connection  with  Essential  Consultants. 

e  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  Including  ariy  docuinente 

that  indicate  the  nature  and  purpose  of  payments  m^e  to  or  Michael  Cohen  & 
or  evidence  of  the  purpose  of  accounts  opened  m  the  name  of  Miehael  D.  Cohen  &  Associates. 

f  Evidence  relating  to  Cohen's  net  worth,  available  cash  and  cash  equivalenB 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  persoi^ly  “  *ta™g 
Entities!  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  Januaoi  1, 

2013  to  the  present. 

p.  Evidence  relating  to  agreements,  loans,  and/or  financial  transaction^etw^ 

^and/or  entities  controlled 
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I  and  any  payments  by  t| 


Ito  Cohen,  from  January 


1, 2012  to  the  present. 

h  Evidence  relating  to  payments  to  Stephanie  Clifford.  Kamn  McDongal.  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i  Evidence  of  communications  involving  Michael  Cohen,  Donald  Tramp  antfor 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDouga ,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

_ _i  _Evidence  of  communications  between  Michael  Cohen  and  American  M^a  Inc.. 

David  Pecta,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephame 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

1  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  die 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  an^or  other  accountants 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  , 

present. 

p  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
thL  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
fmanoial  institution;  the  sonice  of  funds  flowing  into  an  account;  or  *e 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 


B. 


Search  and  Seizure  of  Electronically  Stored  Information 


The  items  to  be  seized  from  Subject  Premises-2  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  II.A  of  this  Attachment  above,  including,  but  not  limited  to,  any  ^  ^  ^ 
laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone  belongmg  to  Michael  Co  en 
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or  in  his  nossession  portable  hard  drives,  disk  drives,  thumb  drives,  and  personal  digital  assistants. 

Heu  ^  computer  devices  or  storage  media,  dtis  warrant  also  author^s  the 

copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-2  also  include. 

1  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computed  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
deviLs,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  mforma  . 

2  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 

devices  or  storagi  media,  including  any  hardware  or  software  manuals  or  other  mformation, 
concejSSgtii^c-ftftft^ibnmftheseM^  - 

3  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
conh-ol  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  ^^^^on 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  m  additio 
enforcement  officer  and  agents,  attorneys  for  the  government,  attorney  support  staff  agency 
n^el  assto  the  government  in  this  investigation,  and  outside  tec^ical  experts  under 
government  control)  are  authorized  to  reviewtheESI  contained  therein  for  information  responsive 

to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example. 

.  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  draw 
believed  to  contain  pertinent  files); 

cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  detennine 


•  opening  or 
their  precise  contents; 

•  scanning  storage  areas 
deliberately  hidden  files; 


to  discover  and  possibly  recover  recently  deleted  files  or 


.  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
Lcurrencfs  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation,  and 

.  reviewing  metadata,  system  information,  configuration  files,  registry  data  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  fil  s, 
documents  dr  other  electi-onically  stored  information  within  the  categories  identified  m  Sections 
II A  and  II B  of  this  Attachment.  However,  law  enforcement  personne  are  authorized  to  “ndu 
a  com^kte  review  of  all  the  ESI  from  seized  deviees  or  storage  media  rf  necessary  to  evaluate  tts 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably 
^rSomey-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 

potential  privileges. 
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ATTACHMENT  C 

I.  Premises  to  be  Searched — Subject  Premises-3 

The  premises  to  be  searched  (“Subject  Premises-3”)  are  described  as  fellows,  and  include 
all  locked  and  closed  containers  found  therein; 

A  safe  deposit  box  located  inside  thtJD  Bank  branch  location  at  500  Park  Avenue  New 
York,  itw  YoA  10019,  marked  as  box  #  |  The  safe  deposit  box  is  m  the  name  of  Michael 

Cohen  and  Laura  Cohen. 


n.  Items  to  Be  Seized 


A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from  Subject  Premises-3  are 
of  violations  of  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  ^  344 

/'fake  hank  entries')  1014  (false  statements  to  a  financial  institution),  1343  (wire  traudj, 

SS  "arf  52  U  S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  c^paign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

1.  Evidence  relating  to  Michael  Cohen's  net  word,,  available  ™d  c^ 

equivalents,  assets,  monthly  and  annual  income,  and  income  sources,  from  January  1, 2013 

present. 

2.  Evidence  relating  to  payments  to  Stephanie  Clifford,  K"cn  “cDoug^  or  to 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documenls. 
and  any  communications  related  to  such  agreements. 

3  Evidence  of  communications  involving  Michael  Cohen,  Donald  Tramp  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal, 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

4  Evidence  of  communications  between  Michael  Cohen  and  Ttaerican 

David  Lker,  Id/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 

Chfford,  and/or  Karen  McDougal. 

5.  Evidence  relating  to  Cohen's  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

6  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 

Trump  Camptugn  about  the  .1  ccess  Hollywood  tape  and  ofeer  potential  sources  of  negative 
publicity  involving  Tramp’s  relationship  m  the  ran  up  to  the  election. 

7,  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 
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8.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

9.  Any  portable  electronic  storage  device. 

B.  Search  of  Seized  Electronic  Devices 

Probable  cause  exists  to  search  any  seized  electronic  storage  device  for  the  items  set 


forth  in  Section  II(A)(l)-(8),  above. 
C.  Review  of  ESI 


information  responsive  to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

.  surveying  various  Hie  “directories”  and  the  individual  fries  they  contain  (analogous  to 
looktag  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  openmg  a  drawer 
believed  to  contain  pertinent  files); 

.  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 

their  precise  contents; 

.  scanning  storage  areas  to  discover  and  possibly  mcover  recently  deleted  files  or 
deliberately  hidden  files; 

.  DerformingkeywordsearchesthroughallelectronicstorageareastodeterminewhAer 

Lutrenefs  of  language  contained  in  such  storage  areas  exist  that  are  mtunalely  related 

to  the  subject  matter  of  the  investigationj  and 

.  reviewing  metadata,  system  information,  configuration  files,  registry  data  and  any 
other  infoi-mation  reflecting  how,  when,  and  by  whom  the  computer  was  used. 

Trw  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 

a  '^r;irmS  o“Ell  ”om  seizh  devices  if  necessary  to  evaluate  its  contents  and  to 
locate  all  data  responsive  to  the  warrant. 

Additionallv  review  of  the  items  described  in  this  Attachment  shall  be  conducted  P'J^suant  to 
esSrll  proddmes  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
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any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  incMe 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  orderto  addr 

potential  privileges. 
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ATTACHMENT  D 

I.  Premises  to  be  Searched— Subject  Premises-4 

The  premises  to  be  searched  (“Subject  Premises-4”)  are  described  as  follows,  and  include 
elech-onic  devices,  and  all  locked  and  closed  containers  found  therein: 

Room  1728  located  inside  the  Loews  Regency  Hotel  at  540 
York  10065.  The  building  is  a  luxury  hotel  located  on  Park  Avenue  and  61st  Street  Subject 

Premises-4  is  located  on  the  17th  floor  of  the  hotel. 

n.  Items  to  Be  Seized  _ _ _ _ _ 


A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from  Subject  Premises-4  aie  evidence,  ftuite  arid  ij^entalife 

of  violations  of  18  U.S.C.  §§  371  (conspiracy,  it  Ji  U44 

tfake  bank  entries)  1014  (false  statements  to  a  financial  mstitution),  1343  (wire  haudj,  ana 

frtrand  52  U  S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 

contributions)  (the  “Subject  Offenses”),  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Banlc,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 

b  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  ^ohen  and/or 
entities  associated  with  him  to  tr|j^^j^>jj|r|^in  taxi  medallions,  and  any  associated  deb 
Smtls,  to  others,  including  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d  Evidence  relating  to  Essential  Consultants,  EEC,  including  any  documents  &at 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential 

of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultan  . 

e  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  ^^n  Michael  D.  Cohen  &  ^^at  s, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associat  . 

f  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents 
monthly  and  alutd  income,  income  sources,  and  other  assets,  whether  held  persoMlly  or  through 
entities!  including  tax  returns,  personal  financial  statements,  and  bank  records,  torn  January  1, 
2013  to  the  present. 

g  Evidence  relating  to  agreements,  loans,  and/or  financial  transaction^^v^ 
Cohen  controlled 
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1),  and  any  payments  by| 


Ito  Cohen,  from  January 


1,  2012  to  the  present. 


h  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i  Evidence  of  communications  involving  Michael  Cohen.  Donald  Truj^  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDouga  , 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

_  i  of  communications  between  Michael  Cohen  and  American  Mefa  Jnc 

David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordmation  or 
consultation  with  the  Trump  Campaign. 

1  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  fte 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  nega 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getel  antor  other  • 

relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  ftom  January  1,  2013  to  the 

present. 

n  Communications,  records,  documents,  and  other  files  reflecting  false 
renresentatfons  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 

the  nature  of  any  business  or  entity  associated  with  an  account  at  a 

Siancial  institution;  the  source  of  funds  flowing  into  an  account;  or  toe  ^ 

financial  transactions  involving  that  financial  institution,  from  January  1, 2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-4  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  fallmg  withm  the  categories 
set  forth  in  Section  II A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  P  , 
a:“dX  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  ^i^es,  dis 
drives^  thlmb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  revie  . 

The  items  to  be  seized  from  Subject  Premises-4  also  include: 

1  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  e^^^tio^ 
deviLs,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  mformati  . 

2  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storagi  media,  including  any  hardware  or  software  manuals  or  other  Mormafton 

■Concerning  the^fi^tibnoffhe^izeft-orcopied-com^^^^  - 

3  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 


C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  ^ 

forensic  image  Lpies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  f 

nersomel  assistine  the  government  in  this  investigation,  and  outside  technical  experts  iin 
g“Lt  Cl)  are  Lhorized  to  review  the  ESI  contained  therein  for  information  responsive 

to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

.  surveying  various  file  “directories”  and  the  individual  files  they  contam  (analogous  to 
looking  atthe  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 


opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  deteimine 
their  precise  contents; 

scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 


•  performing  key  word  searches  through  all  electronic  storage  areas 
occurrences  of  language  contained  in  such  storage  areas  exist  that 
to  the  subject  matter  of  the  investigation,  and 


to  determine  whether 
are  intimately  related 


reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents  or  other  electronically  stored  information  within  the  categories  identified  in  Sectmns 
n  A  and  ILB  of  this  Attachment.  However,  law  enforcement  persomel  are  • 

a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate 

contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  eondueted  piquant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  proceduies  shall  mclu 
nse  of  a  designated  “filter  team.”  separate  and  apart  from  the  investigative  team,  m  order  to 
address  potential  privileges. 


r 
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ATTACHMENT  E 

I.  Device  Subject  to  Search  and  Seizure  -  Subject  Device-1 

The  device  that  is  the  subject  of  this  search  and  seizure  warrant  (“Subject  Device-l”)  is 

described  as  follows: 

An  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number^^^^H 
Durine  the  execution  of  this  search  warrant,  law  enforcement  personnel  are  authorized  to 

to  gain  access  to  the  contents  of  any  such  device  as  authorrzed  by  this  warran  . 

n.  Review  ofESI  on  the  Subject  Device 

T  aw  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and  agents, 

"fte  E^coi 

•  1  88  “^Vl  ^consoiracy  as  it  pertains  to  the  other  Subject  Ott  j?  ^  . 

violations  oi  lo  §§  v  P  ^  •  i  •  AxHrp  ■Frauds  and  1344  (bank 

SrlSirH  u's.at§  3”aXA)  So9(dXl)(A)(l)  (illegal  campaign  contributions) 

(the  “Subject  Offenses”)  described  as  follows; 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 

b  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  ^ohen  an^or 

entities  associa.dwithhimtotra^^^in^i  — 

liabilities,  to  others,  mcludmg  tc^^^^^^^^na/or  enuuc^, 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d  Evidence  relating  to  Essential  Consultants,  EEC,  including 
Essential  Consultants. 

e  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  dpc^ents 

"  Lrm™  m!*:!  d; 

Cohen  &  Associates. 
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f  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  ttogh 
entities!  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
2013  to  the  present 

„  to  agreement,  loans,  and/or  financial  tans^ion^etw^ 

1  and/or  entities  controlled 

payments  by  tl|^^:o  Cohen,  from  January 

1, 2012  to  the  present 

h  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDongal,  or  then 

agents-or4egaUepresentafes,  jnc!ilding_any_nondisclosure  agreements  and  rel^d  documents,  _ 

and  any  communications  related  to  such  agreements. 

i  Evidence  of  communications  involving  Michael  Cohen,  Donald  Tnmp  and/or 
agents  or  a!»ociates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDongal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

i  Evidence  of  communications  between  Michael  Cohen  and  /^erican  Media,  Inc 
David  Pecte,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephame 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordmation  or 
consultation  with  the  Trump  Campaign* 

1  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

0.  CommunicaUous  with  others,  including  Jeffrey  Get^l  an^or  othe.'  acej.— 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  ftom  January  1,  2013  to  the 

present. 

p.  Communications,  records,  documents,  and  other  fdes  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  “  " 

that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
fLncial  institution;  the  source  of  funds  flowing  into  an  account;  or  *e 
financial  transactions  involving  that  financial  institution,  from  January  1, 2013  to  the  present 
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If  the  Government  determines  that  Subject  Device- 1  is  no  longer  necessary  to  retrieve 
nreserve  the  data  on  the  device,  and  that  Subject  Device-1  is  not  subject  to  seizure  pursuant  to 
Federal  Rule  of  Criminal  Procedure  41(c),  the  Government  will  return  Subject  Device-1,  upon 

request. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  oondueted  pur^t 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
ly  atonewc?ient  or  other  applicable  privilege.  When  appropriate,  the  procedures  shtdl  nrclude 
usLf  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  morderto  address 

potential  privileges. 
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ATTACHMENT  F 

I.  Device  Subject  to  Search  and  Seizure  -  Subject  Device-2 

The  device  that  is  the  subject  of  this  search  and  seizure  warrant  (“Subject  Devioe-2”)  is 

described  as  follows: 

An  Apple  iPhone  serviced  by  AT&T  with  the  telephone  nuniber||^^|^^^| 

During  the  execution  of  this  search  warrant,  law  enforcement  persormd  are  ^^^thomed  to 

to  gain  access  to  the  contents  of  any  such  device  as  authorized  by  thia  wairan  . 

IL  Review  ofESI  on  the  Subject  Device 

Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and  agents, 
violations  of  18  U.S.C.  §§371  (conspiracy  as  it  Pf  I344 

bank  entries')  1014  (false  statements  to  a  financial  institution),  1343  (w  ),  + -u 

S:t;r52  U.S.C.  §§  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions) 

(the  “Subject  Offenses”)  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Banlc,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1 ,  20 1 3  to  the  present. 

b  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  an^or 

entities  associamdwithhirntot^^ilgnt^i-^^ 

liabilities,  to  others,  mcludmg  eiiuucb 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d  Evidence  relating  to  Essential  Consultants,  EEC,  including  any  ^documents  or 
Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  my 
Cohen  &  Associates. 
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f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  , 
2013  to  the  present. 

e.  Evidence  relating  to  agreements,  loans,  and/or  financial 
Cohen  entitiescontrolle^y^^^^^^^^^H 

any  payments  by  Cohen,  from  January 

1,  2012  to  the  present. 

h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 

agents-or4egal-  representatives,,inchiding  Miy.  nondisclosmg_aggen^nts  and  related 

and  any  communications  related  to  such  agreements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  Americ^  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
pubheily  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountant, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 

p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  ol  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 
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If  the  Government  determines  that  Subject  Device-2  is  no  longer  necessary  to  retrieve  and 
preserve  the  data  on  the  device,  and  that  Subject  Device-2  is  not  subject  to  seizme  pursuant  to 
Federal  Rule  of  Criminal  Procedure  41(c),  the  Government  will  return  Subject  Device-2,  upon 

request. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  mclude 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  m  order  to  address 

potential  privileges. 
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AO  93  (SDNY  Rev,  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of 
(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

502  Park  Avenue,  Apartment  New  York,  New  York 
10022,  and  any  closed  containers/items  contained 
therein,  See  Attachment  A 


SEARCH  AND  SEIZURE  WARRANT 


2969 


To:  Any  authorized  law  enforcement  officer 


An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  seai'ch 
of  the  following  person  or  propeily  located  in  the  Southern  District  of  _ New  York 

(identify  the  person  or  describe  the  to  be  searched  and  give  its  location): 

502  Park  Avenue,  Apartment  New  York,  New  York  1 0022,  and  any  closed  containers/items  contained  therein, 
See  Attachment  A 

The  person  or  propeily  to  be  seai'ched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized): 

See  Attachment  A 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  se.ai:ch  and  seize  the  person  or 
property,  .  ^ 

Y OU  ARE  COMMANDED  to  execute  this  warrant  on  or  before  fy)  ^  ^  ^ 

^  ^  '  (not  to  exceed  14  days) 

Sf  in  the  daytime  6:00  a.m.  to  10  p.m.  □  at  any  time  in  the  day  or  niigbt  as  1  find  reasonable  caiisc  been 

established.  ;  ,  ;  !  ,  ■ 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  wdiTanf  and  a  receipt.for  the  propeily 
taken  to  the  person  fi*om  whom,  or  from  whose  premises,  the  propeity  was  taken, ’or  le'avh  the  copy  and  receijit  at  the 
place  where  the  propeiiy  was  taken.  ^  ;  y  j 

The  officer  executing  this  wairant,  or  an  officer  present  during  the  execution  of  the  waiTant,  must  prepare  an 
inventoiy  as  required  by  law  and  promptly  retiun  this  warrant  and  inventoiy  to  the  Clerk  of  the  Court. 

_ Upon  its  return,  this  wairant  and  inventoiy  should  be  filed  under  seal  by  the  Clerk  of  the  Couit:. _ 

USMJ  Initials 


□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  thp  pdrsbh  who,  or  whose  propeity,  will  be 
searched  or  seized  (check  the  appropriate  box)  Ofor  _ days  (not  to exce^Si))!  '  '  ’  I'  T 

□until,  the  facts  justi^ing,  the  later' specific  date  of  _ 


Date  and  time  issued:  t/  ^  ^  £ 

City  and  state:  New  York  NY _ 


■^iKon^  Henry  3.  I^[tm^.  ti.g)  Magistrate  Judge 


Primed and  title 


i/; 


Ti  \ 
n  n 
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AO  93  (Rev.  01/09)  Search  and  Seizure  Warrant  (Page  2) 


Return 

Case  No.: 

Date  and  time  wairant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventoiy  made  in  the  presence  of: 

Inventoiy  of  the  property  taken  and  name  of  any  person(s)  seized: 

 Certification 

I  declai'e  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  wairant 
to  the  Court. 


Date:  _  _ 

Executwg  officer  *s  signature 


Printed  name  and  title 
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ATTACHMENT  A 

I.  Premises  to  be  Searched — Subject  Premises-1 

The  premises  to  be  searched  (“Subject  Premises- 1”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therem: 

Apartment^^Hlocated  inside  the  building  at  502  Park  Avenue,  New  York,  New  York 
10022.  The  building  located  at  502  Park  Avenue  is  a  32-floor  brick  residential  building.  Subject 
Premises-1  is  located  on  the  H||H^|bf  the  budding. 

n.  Items  to  Be  Seized 

- At — ^EvideucejrFruits^and  Instrumentalities  of  the  Subject  Offenses - — 

The  items  to  be  seized  from  Subject  Premises-1  are  evidence,  fruits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§371  (conspiracy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  ftaud),  and  1344 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Banlc,  Mekose  Credit  Union,  and/or  taxi 
medallions,  from  January  1 , 201 3  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  ^^^^^^^^^and/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  pmpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nafrue  and  purpose  of  payments  made  to  or  fi'om  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  pmpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 

f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  retmns,  personal  financial  statements,  and  bank  records,  from  January  1, 
20 1 3  to  the  present. 

g.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

Cohen  and^^^^^^^^^^^^^^^^^^Hind/or  controlled  by 
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and  any  payments  Cohen,  fi'om  Januaiy 

1 , 20 1 2  to  the  present. 

h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  then- 
agents  or  legal  representatives,  including  any  nondisclosm-e  agreements  and  related  documents, 
and  any  communications  related  to  such  agi'eements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Ti-ump  Campaign  about  Stephanie  Clifford  or  Kai-en  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stepbanift 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Ti-ump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Holl}!V,rood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbm'sement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  coimection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  soui’ce  of  funds  flowing  into  an  account;  or  the  puipose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  fi-om  January  1,  2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  fi'om  Subject  Premises- 1  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  uifoimation  falling  within  the  categories 
set  forth  in  Section  II.A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  Pro, 
any  other  desktop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  waiTant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  &om  Subject  Premises-1  also  include: 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  enciyption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  softwai’e  manuals  or  other  information 
concerning  the  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. 

3 .  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media, 

C.  Review  of  ESI 

Following  seizm’e  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  oJHicers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
pei-sonnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  infoimation  responsive 
to  the  waiTant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  vaiious  techniques  to  locate 
information  responsive  to  the  wan'ant,  including,  for  example; 

®  sm'veying  vaiious  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  marldngs  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

e  opening  or  cm’soiily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

®  scanning  storage  ai'eas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

*  perfoiming  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occmxences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

e  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  infoimation  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
II.  A  and  II.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  aU  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  desciibed  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter'  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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AO  93  (SDNY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of  ) 

(Briefly  describe  the  property  to  be  searched  ) 

or  identify  the  person  by  name  and  address)  )  Case  No. 

502  Park  Avenue,  Apartment^^l  New  York,  New  York  | 

10022,  and  any  closed  containers/items  contained 

therein,  See  Attachment  A  ^ 

SEARCH  AND  SEIZURE  WARRANT 

To:  Any  authorized  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 
of  the  following  person  or  property  located  in  the  _ Southern  District  of  _ New  York _ 

(identify  the  person  or  describe  theprovertv  to  be  searched  and  give  its  location)'. 

502  Park  Avenue,  Apartment  ^^flNew  York,  New  York  10022,  and  any  closed  containers/items  contained  therein, 
See  Attachment  A 

The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized) : 

See  Attachment  A 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 
property. 


YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before 


(not  to  exceed  14  days) 


Sf  in  the  daytime  6:00  a.m.  to  10  p.m.  □  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

established. 


Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  of  the  Court. 

Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Court. _ 

USMJInitiab 

□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 

searched  or  seized  (check  the  appropriate  box)  Ofor  _ days  (not  to  exceed  30). 

□until,  the  facts  justifying,  the  later  specific  date  of  _ 

Date  and  time  issued:  "7  f).  _ 

^  ~  ^  (  Judge 's  signature 


i 

I 


I 


City  and  state:  New  York.  NY 


Hon.  Henry  B.  Pitman.  U.S.  Magistrate  Judge 

Printed  name  and  title 
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Return 

Case  No.: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 

Certification 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court. 


Date:  _  _ 

Executing  officer 's  signature 


Printed  name  and  title 
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ATTACHMENT  A 


1.  Premises  to  be  Searched — Subject  Premises-1 

The  premises  to  be  searched  (“Subject  Premises-l”)  are  described  as  follows,  and  include 
elecbonic  devices,  and  all  locked  and  closed  containers  found  therein: 

Apartmenl^^Blocated  inside  the  brdlding  at  502  Park  Avenue,  New  York,  New  York 
10022.  The  building  located  at  502  Park  Avenue  is  a  32-floor  brick  residential  building.  Subject 
Premises-1  is  located  on  the^^^^^^of  the  building. 

n.  Items  to  Be  Seized 

_ A._Evidence,  Fruits,  andTnstrumentalities.  of  the^  Sub jectjQffenses. . . . 

The  items  to  be  seized  from  Subject  Premises-1  are  evidence,  fruits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspbacy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 


b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 


liabilities,  to  others,  including  to 


land/or  entities  associated  with  him. 


c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterhng  and/or  Melrose. 


d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 


e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 


f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
2013  to  the  present. 

Cohen  and 


to  agreements,  loans,  and/or  financial  transactions  between 
d/or  entities  controlled  by 
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and  any  payments  by 


1,  2012  to  the  present. 


0  Cohen,  from  January 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 


i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 


j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
^CliffordTand/or  KaremMcDbugal: 


k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Chfford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

0.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises- 1  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  II-A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  Pro, 
any  other  desktop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises- 1  also  include: 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  information 
concerning  the  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. 

3 .  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
persoimel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

•  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
beheved  to  contain  pertinent  files); 

•  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

•  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

•  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
II.  A  and  II.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  ftom  the  investigative  team,  in  order  to  address 
potential  privileges. 
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v 


AO  93  (SDNY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 

In  the  Matter  of  the  Search  of 
(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

Michael  Cohen’s  Office  at  30  Rockefeller  Plaza,  23rd 
Floor,  New  York,  New  York  1 01 12,  and  any  closed 
containers/items  contained  therein,  See  Attachment  B 

SEARCH  AND  SEIZURE  WARRANT 


T 0 :  Any  authorized  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 

of  the  following  person  or  propeily  located  in  the  _ Southern  District  of  _ New  York 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location)*, 

Michael  Cohen’s  Office  at  30  Rockefeller  Plaza,  23rd  Floor,  New  York,  New  York  101 12,  and  any  closed 
containers/items  contained  therein,  See  Attachment  B 

Tlie  person  or  propeily  to  be  searched^  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)*. 

See  Attachment  B 


!  18M4^G  2969 

)  Case  No*  ...  \  ^  v 

)  ■  ^-  \ 


I  find  that  the  affidavit(sX  or  any  recorded  testimony,  establish  probable  cause  to  searcl|f|hd  plztthe,  person  or 
property.  i  .  ’  ^ 

YOU  ARE  COMMANDED  to  execute  this  waiTant  on  or  before  ^  ^  ;  _ 

U  ■  (hoi  to  exceed  14  days)  ^ 

Sf  in  the  daytime  6:00  a*m.  to  10  p.m.  □  at  any  time  in  the  day  or  night  fin<f  reasonable  cause  has  been 

established.  -  ^  '  V  >  . 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  waitaht  and  a  receipt  for  the  prbpeily 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  properly  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  propeify  was  taken.  '  i  ‘  ■ '  ’ '  '  ' 

The  officer  executing  this  waiTant,  or  an  officer  present  during  the  execution  of  the  warrant,  tnust  prepare  an 
inventoiy  as  required  by  law  and  promptly  return  this  wairant  and  inventoiy  to  the  Clerk  of  the  Couit. 

_ Upon  its  return,  this  wairant  and  inventory  should  be  filed  imder  seal  by  the  Clerk  of  the  Court. _ 

OSMJ  Initials 

□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  wairant  to  delay  notice  to  the  person  who,  or  whose  propeily,  will  be 
searched  or  seized  (check  the  appropriate  box)  Ofor  _ days  (not  to  exceed  30). 

□until,  the  facts  justifying,  the  later  specific  date  of  _ . 


Date  and  time  issued:  Y  /  j 

City  and  state:  New  York.  NY _ 


7 


' '  Hoh.i'l-leniv  B.  Pitman,  U.S.  Magistrate  Judge 


Printed  mnie  ml  Pe 
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Returii 


Case  No.: 


Date  and  time  warrant  executed: 


Copy  of  warrant  and  inventory  left  with: 


Inventory  made  in  the  presence  of : 


Inventory  of  the  propeify  taken  and  name  of  any  person(s)  seized: 


Certification 


I  declare  under  penalty  of  perjuiy  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Couit, 


Date: 


Execuimg  officer’s  signature 


Printed  name  and  title 
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ATTACHMENTS 

I.  Premises  to  be  Searched^ — Subject  Premises-2 

The  premises  to  be  searched  (“Subject  Premises-2”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein; 

An  office  belonging  to  or  assigned  to  Michael  Cohen  located  on  the  23rd  floor  of  the 
building  at  3  0  Rockefeller  Plaza,  New  York,  New  York  10112,  inside  of  the  offices  of  the  law  firm 
Squire  Patton  Boggs.  The  building  located  at  30  Rockefeller  Plaza  is  a  66-floor  office  building 
that  spans  the  entire  block  between  Sixth  Avenue  and  Rockefeller  Plaza. 

II.  Items  to  Be  Seized 


A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from  Subject  Premises-2  are  evidence,  fi'uits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (consphacy  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  banlc  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fi-aud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
conhibutions)  (the  “Subject  Offenses”)  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Banlc,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1, 2013  to  the  present. 


b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 


liabilities,  to  others,  including  tol 


luid/or  entities  associated  with  him. 


c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 


d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  pmpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 


e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  natare  and  pmpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 


f.  Evidence  relating  to  Cohen’s  net  woith,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  somnes,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  retmms,  personal  financial  statements,  and  banlc  records,  fi-om  January  1, 
2013  to  the  present. 


Cohen  and 
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g.  Evidence  relating  to  agreements,  loans,  and/or  financial  fiansactions  between 

and/or  entities  controlled  by  I 


i 


\ 

\ 


] 


‘i 

il 


i: 

i 


i| 


I 

il 


Case  l:18-cr-00602-WHP  Document  48-1  Filed  07/18/19  Page  220  of  269 


land  any  payments  by 


Ito  Cohen,  from  January 


1, 2012  to  the  present. 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosme  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i.  Evidence  of  conomunications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Kai'en  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trumn,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 


k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Tnimp  and/ or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Tnjmp’s  relationship  in  the  mn  up  to  the  election. 

m.  Evidence  relating  to  any  reimbm'sement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  comiection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contiihution  reporting  requirements,  and  campaign  contribution  limits. 


o.  Communications  with  others,  including  Jeffirey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  accoimt  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  accoimt;  or  the  purpose  or  natine  of  any 
financial  transactions  involving  that  financial  institution,  fi'om  January  1, 2013  to  the  present. 

q.  Evidence  of  Cohen’ s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  he  seized  from  Subject  Premises-2  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  foitii  in  Section  11.  A  of  this  Attachment  above,  including,  but  not  limited  to,  any  desktop  and 
laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone  belonging  to  Michael  Cohen 
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or  in  his  possession,  portable  hai'd  drives,  disk  drives,  thumb  drives,  and  personal  digitsil  assistants. 
In  lieu  of  seizing  any  such  computer  devices  or  storage  media,  this  warrant  also  authorizes  the 
copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-2  also  include: 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  softwai'e  manuals  or  other  information 
concerning  the  configm'ation  of  the  seized  or  copied  computer  devices  or  storage  media. 

3 .  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizm'e  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  erdbrcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant 

hr  conducting  this  review,  law  enforcement  persormel  may  use  various  teclmiques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

•  smveying  various  file  “dhectories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opeiring  a  drawer 
believed  to  contain  pertinent  files); 

•  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

®  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
dehberately  hidden  files; 

a  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurxences  of  language  contained  hr  such  storage  areas  exist  that  are  intimately  related 
to  the  subj  ect  matter  of  the  investigation;  and 

®  reviewing  metadata,  system  information,  configm’ation  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  infoiination  within  the  categories  identified  in  Sections 
If.  A  and  II.B  of  this  Attachment.  However,  law  enforcement  personnel  ai'e  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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AO  93  (SONY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of  ) 

(Briefly  describe  the  property  to  be  searched  ) 

or  identify  the  person  by  name  and  address)  )  Case  No. 

Michael  Cohen’s  Office  at  30  Rockefeller  Plaza,  23rd  ? 

Floor,  New  York,  New  York  10112,  and  any  dosed  ^ 
containers/items  contained  therein.  See  Attachment  B  ^ 


SEARCH  AND  SEIZURE  WARRANT 


To:  Any  authorized  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 
of  the  following  person  or  property  located  in  the  _ Southern  District  of  _ New  York _ 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location)^ 

Michael  Cohen’s  Office  at  30  Rockefeller  Plaza,  23rd  Floor,  New  York,  New  York  10112,  and  any  closed 
containers/items  contained  therein.  See  Attachment  B 

The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)’. 

See  Attachment  B 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 
property. 


YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before 


(not  to  exceed  14  days) 

Sf  in  the  daytime  6:00  a,m.  to  10  p.m.  □  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

estabhshed. 


Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  of  the  Court. 

Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Court. _ 

USMJ  Initials 

□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  1 8  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 
searched  or  seized  (check  the  appropriate  box)  Ofor  _ days  (not  to  exceed  30). 

□until,  the  facts  justifying,  the  later  specific  date  of  _ 

Date  and  time  issued: 

*  '  f  Judge 's  signature 


City  and  state:  New  York.  NY 


Hon.  Henry  B.  Pitman.  U.S.  Magistrate  Judge 

Printed  name  and  title 
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AO  93  (Rev.  01/09)  Search  and  Seizure  Warrant  (Page  2) 


Return 

Case  No.: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 

Certification 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court. 


Date:  _ _  _ 

Executing  officer  *s  signature 


Printed  name  and  title 
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ATTACHMENT  B 

I.  Premises  to  be  Searched — Subject  Premises-2 

The  premises  to  be  searched  (“Subject  Premises-2”)  are  described  as  follows,  and  include 
elecbonic  devices,  and  all  locked  and  closed  containers  found  therein: 

An  office  belonging  to  or  assigned  to  Michael  Cohen  located  on  the  23rd  floor  of  the 
building  at  3  0  Rockefeller  Plaza,  New  Y  ork.  New  Y  ork  10112,  inside  of  the  offices  of  the  law  firm 
Squire  Patton  Boggs.  The  building  located  at  30  Rockefeller  Plaza  is  a  66-floor  office  building 
that  spans  the  entire  block  between  Sixth  Avenue  and  Rockefeller  Plaza. 

n.  Items  to  Be  Seized 


A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from  Subject  Premises-2  are  evidence,  fruits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”)  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Mehose  Credit  Union,  and/or  taxi 
medalhons,  from  January  1,  2013  to  the  present. 


b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 


liabilities,  to  others,  including  to 


lind/or  entities  associated  with  him. 


c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 


d.  Evidence  relating  to  Essential  Consultants,  EEC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 


e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 


f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
20 1 3  to  the  present. 


Cohen  and 


g.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

^  6 
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and  any  pa5Tnents  by 

h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
'Clifford,  and/oTKaren  McDougSC" 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  soxnces  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 

p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  accoimt  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 

q.  Evidence  of  Cohen’s  mtent  as  it  relates  to  the  Subject  Offenses  imder  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-2  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  II.A  of  this  Attachment  above,  including,  but  not  limited  to,  any  desktop  and 
laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone  belonging  to  Michael  Cohen 


Ito  Cohen,  from  January 
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or  in  his  possession,  portable  hard  drives,  disk  drives,  thumb  drives,  and  personal  digital  assistants. 
In  lieu  of  seizing  any  such  computer  devices  or  storage  media,  this  warrant  also  authorizes  the 
copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-2  also  include: 

1 .  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  information 
concerning  the  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. 

3 .  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

•  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

•  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

•  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
dehberately  hidden  files; 

•  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
11.  A  and  II.B  of  this  Attachment.  However,  law  enforcement  persormel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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AO  93  (SDNY  Rev.  05/10)  Search  aad  Seizure  Warrant 


United  States  District  Court 


for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of 
(Briefly  describe  the  property  to  be  sew'ched 
or  identify  the  person  by  name  and  address) 

Saf0  Deposit  Box^^l.ocated  at  the  TD  Bank  Branch  at 
500  Park  Avenue,  New  York,  New  York  10019,  and  any 
closed  containers/items  contained  therein,  See  Att.  C 


SEARCH  AND  SEIZU; 


To;  Any  authorized  law  enforcement  officer 


An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 
of  the  following  person  or  propeity  located  in  the  _ Southern  District  of  _ New  York 

(identify  the  person  or^^^^jjhe  the  property  to  be  searched  and  give  its  location)*. 

Safe  Deposit  Bo>^^J,ocated  at  the  TD  Bank  Branch  at  500  Park  Avenue,  New  York,  New  York  10019,  and  any 
closed  containers/Rems  contained  therein, See  Attachment  C 

The  person  or  property  to  be  searched^  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized): 

See  Attachment  C 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  seainh  and  seize  the  person  or 
propeity. 


YOU  ARE  COMMANDED  to  execute  this  waiTant  on  or  before 


\  '  '  (not  io  esc^ed  14  ddy^ 

Ef  in  the  daytime  6:00  a,m.  to  10  p,m.  □  at  any  time  in  the  day  or  nig^t^s  I  fjpd  rea^ofiabld  cause  has  been 

established.  ;  ' 


U- )  s;'  : 

Unless  delayed  notice  is  autliorized  below,  you  must  give  a  copy  of  the  waitapt  and  afeceipt  for  the  property 
taken  to  the  person  from  whom,  or  fi'om  whose  premises,  the  propeity  was  taken,  of  leave  tiic  copy  ahd  receipt  at  the 
place  where  the  propeity  was  taken.  ,  ■  ;  ;  >  ( 

The  officer  executing  this  waixant,  or  an  officer  present  duiing  the  execution  of  tire,  warrant,'  must  prepare  an 
inventoiy  as  requhed  by  law  and  promptly  return  this  wairant  and  inventoiy  to  the  dleik  of  the  Gctut. 

_ Upon  its  return,  this  wairant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Comt.  _ _ 


XJSJ^dJ  Initials 


□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  1 8  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 
seai’ched  or  seized  (check  the  appropriate  box)  Ofor  _ days  (not  to  exceed  30). 

□until,  die  facts  justifying,  the  later  specific  date  of  _ 


Date  and  time  issued:  4^^  /A 

City  and  state:  New  York.  NY _ 


7  / 

- - 


~^udge 's  sigricdtitie 


Hon.  Henry  B.  Pitman.  US. 


Printed  name  and  title  ^  '•  > 


M'  ■  '  - 


”  ._5 
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Return 

1  r 

1 

Case  No.: 

/ 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

I 

1 

Inventoiy  made  in  the  presence  of : 

i  1 

j  1 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 

i  1 

/ 

j 

i 

i 

1 

j 

i 

j 

[ 

1 

Certification  - 

I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Com-t. 

!' 

Date: 

i 

Executing  officer  *s  signature 

{ 

Printed  name  and  title 

5  i 

j:  ' 

j 

i 
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ATTACHMENT  C 

L  Premises  to  be  Searched — Subject  Premises-3 

The  premises  to  be  searched  (“Subject  Premises-3”)  are  described  as  follows,  and  include 
all  locked  and  closed  containers  found  therein: 

A  safe  deposit  box  located  inside  the  TD  Bank  branch  location  at  500  Park  Avenue,  New 
York,  New  York  10019,  marked  as  box  ^^^Hlhe  safe  deposit  box  is  in  the  name  of  Michael 
Cohen  and  Laura  Cohen. 

11.  Items  to  Be  Seized 

- A^  Evidencej  Fruits^and  Instrumentalities  of  the  Subject-Offenses - — - 

The  items  to  be  seized  from  Subject  Premises-3  are  evidence,  fruits,  and  instrumentahties 
of  violations  of  18  U.S.C.  §§  371  (consphacy  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fi-aud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

1.  Evidence  relating  to  Michael  Cohen’s  net  worth,  available  cash  and  cash 
equivalents,  assets,  monthly  and  annual  income,  and  income  soiu’ces,  fi’om  January  1, 2013  to  the 
present. 

2.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

3.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

4.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Peclcei',  and/or  Dylan  Howai’d  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

5.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

6.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
pubhcity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

7.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 
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8.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contiibution  reporting  requirements,  and  campaign  contribution  limits. 

9.  Any  portable  electronic  storage  device. 

B.  Search  of  Seized  Electronic  Devices 

Probable  cause  exists  to  search  any  seized  electronic  storage  device  for  the  items  set 
forth  in  Section  n(A)(l)-(8),  above. 

C.  Review  of  ESI 

— ^ - Folio  wing  seizui’e^ofany  electronic-storage  deviee^lawenforeemenfpersonnel(whieh  may- 

include,  in  addition  to  law  enforcement  officers  and  agents,  attorneys  for  the  government,  attorney 
support  staff,  agency  personnel  assisting  the  government  in  this  investigation,  and  outside 
technical  experts  under  government  control)  are  authorized  to  review  the  ESI  contained  therein  for 
information  responsive  to  the  warrant. 

hr  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  irrcluding,  for  example: 

»  surveying  various  file  “dkectories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  marldngs  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

»  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
then  precise  contents; 

e  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

»  performing  key  word  searches  through  all  electronic  storage  ar-eas  to  determine  whether 
occmxences  of  language  contained  in  such  storage  ai'eas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

*  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 

Law  enforcement  personnel  will  rnalce  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
n.  A  and  II.B  of  this  Attachment.  However,  law  enforcement  persormel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  fi:om  seized  devices  if  necessary  to  evaluate  its  contents  and  to 
locate  all  data  responsive  to  tlie  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pur'suant  to 
established  procedures  designed  to  collect  evidence  in  a  maimer  reasonably  designed  to  protect 
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any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedui’es  shall  include 
use  of  a  designated  “filter  team,”  sepai'ate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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AO  93  (SDNY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of  ) 

(Briefly  describe  the  property  to  be  searched  ) 

or  identify  the  person  by  name  and  address)  )  Case  No. 

Safe  Deposit  Box  ^^^Located  at  the  TD  Bank  Branch  at  } 

500  Park  Avenue,  New  York,  New  York  10019,  and  any  ^ 
closed  containers/items  contained  therein,  See  Att.  C  ^ 

SEARCH  AND  SEIZURE  WARRANT 

To :  Any  authorized  law  enforcenient  officer^” 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 

of  the  following  person  or  property  located  in  the  _ Southern  District  of  _ New  York _ 

(identify  the  person  or  the  property  to  be  searched  and  give  its  location)  \ 

Safe  Deposit  Box  Located  at  the  TD  Bank  Branch  at  500  Park  Avenue,  New  York,  New  York  10019,  and  any 
dosed  containers/items  contained  therein, See  Attachment  C 

The  person  or  property  to  be  searched^  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)  \ 

See  Attachment  C 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 
property. 


YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before 


(not  to  exceed  14  days) 

in  the  daytime  6:00  a,m.  to  10  p.m.  □  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

established. 


Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  of  the  Court. 

_ Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Court.  _ _ 

USMJInitials 


□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 
searched  or  seized  (check  the  appropriate  box)  Ofor  _ days  (not  to  exceed  30). 

□until,  the  facts  justifying,  the  later  specific  date  of  _ 


Date  and  time  issued: 


1^1  tjrfrfy 

'  *  Judge 's  signature 


City  and  state:  New  York.  NY 


Hon.  Henry  B,  Pitman.  U.S.  Magistrate  Judge 

Printed  name  and  title 
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AO  93  (Rev,  01/09)  Search  and  Seizure  Warrant  (Page  2) 


Return 

Case  No.: 

Date  and  time  warrant  executed:, 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 

Certification 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court. 


Date:  _ 

Executing  officer 's  signature 


Printed  name  and  title 


I 

I 

I 

ii 

I 

I 
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ATTACHMENT  C 

I.  Premises  to  be  Searched — Subject  Premises-3 

The  premises  to  be  searched  (“Subject  Premises-3”)  are  described  as  follows,  and  include 
all  locked  and  closed  containers  found  therein: 

A  safe  deposit  box  located  inside  the  TD  Bank  branch  location  at  500  Park  Avenue,  New 
York,  New  York  10019,  marked  as  box^^^Jfhe  safe  deposit  box  is  in  the  name  of  Michael 
Cohen  and  Laura  Cohen. 

n.  Items  to  Be  Seized 

A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses _ 

The  items  to  be  seized  from  Subject  Premises-3  are  evidence,  fruits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

1.  Evidence  relating  to  Michael  Cohen’s  net  worth,  available  cash  and  cash 
equivalents,  assets,  monthly  and  annual  income,  and  income  sources,  from  January  1, 2013  to  the 
present. 

2.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

3.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

4.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  fric., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

5.  Evidence  relatiug  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

6.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

7.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 
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8.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

9.  Any  portable  electronic  storage  device. 

B.  Search  of  Seized  Electronic  Devices 

Probable  cause  exists  to  search  any  seized  electronic  storage  device  for  the  items  set 
forth  in  Section  II(A)(l)-(8),  above. 

C.  Review  of  ESI 

_ Following  .seizure  of  any  electronic  storage  device,  law  enforcement  personnel  /which  may 

include,  in  addition  to  law  enforcement  ofScers  and  agents,  attorneys  for  the  government,  attorney 
support  staff,  agency  personnel  assisting  the  government  in  this  investigation,  and  outside 
technical  experts  under  government  control)  are  authorized  to  review  the  ESI  contained  therein  for 
information  responsive  to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

•  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

•  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

•  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

•  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 

Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
II.  A  and  II.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  if  necessary  to  evaluate  its  contents  and  to 
locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
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any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procednres  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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AO  93  (SONY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 


In  the  Matter  of  the  Seai'ch  of 

(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1728, 

New  York,  New  York  10065,  and  any  dosed 
containers/items  contained  therein,  See  Attachment  D 

SEARCH  AND  SEIZURE  WARRANT 


To:  Any  authorized  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  goveimment  requests  the  search 

of  the  following  person  or  property  located  in  the  _ Southern  Distiict  of  _ New  York _ 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  Iocation)\ 

Loews  Regency  Hotel,  640  Park  Avenue,  Room  1728,  New  York,  New  York  10065,  and  any  dosed  containers/items 
contained  therein,  See  Attachment  D 

The  person  or  propeily  to  be  seai’ched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)’. 

See  Attachment  D 


DisMct  of  New  York 


C  ' 


)  Case  No. 


18MAG  2969 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search. the  person  or 


propeily. 

YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before 


;  .  '  (hot  to  exceed  J 4  days)  ' 

Sf  in  the  daytime  6:00  a.in.  to  10  p.m.  □  at  any  time  in  the  day  or  night  as  T  findYeasonable  cause  has  been 

established,  «  '  '  : 


Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  waiTant  ahd  a  receipt  for  the  propeily 
taken  to  the  person  from  whom,  or  fi-om  whose  premises,  the  property  was  taken,  or  leave  the  copy  apd  receipt  at  the 
place  where  the  propeity  was  taken.  .  !  '  U  ■  f  ^ 

The  officer  executing  this  wan*ant,  or  an  officer  present  during  the  execution  of  the  Wairarit,  niust  prepai'e  an 
inventoiy  as  required  by  law  and  promptly  return  this  waiTant  and  inventoiy  to  the  Clerk  of  the  Court. 

_ Upon  its  return,  this  waiTant  and  inventoiy  should  be  filed  under  seal  by  the  Clerk  of  the  Comt. _ 


USMJ  Initials 


□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C,  §  2705  (except  for  delay 
of  tidal),  and  authorize  the  officer  executing  this  wairant  to  delay  notice  to  the  person  who,  or  whose  propeily,  will  be 
seai*ched  or  seized  (check  the  appropriate  box)  Ofor  _ days  (not  to  exceed  30),  ,  ^  x  \  \  ^  . 

□until,  the  facts  justifying,  the  later  specific  date  of  /  W,  I  /  /f ■ _ 


Date  and  time  issued: 


V- 1  - 


7.  rv 


Judge  sigiaitive 


City  and  state:  New  York.  NY 


.  i  A  , 


Hon.  Henry  B.  Pitkiah.'UtS.  Madlstratfe! Judge . 

Printed J:  ,  v  , 


i 

i 
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AO  ,93  (Rev.  01/09)  Search  and  Seizure  Warrant  (Page  2) 


Return 

Case  No.: 

Date  and  time  wairant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 

Certification 


I  declare  under  penalty  of  peijury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  wan'ant 
to  the  Couit:. 


Date: 


Executing  officer 's  signature 


I 

I 


Pnnteci  name  and  title 
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ATTACHMENT  D 

I.  Premises  to  be  Searched^ — Subject  Premises-4 

The  premises  to  be  searched  (“Subject  Premises-4”)  are  described  as  follows,  and  include 
electi'onic  devices,  and  all  locked  and  closed  containers  found  therein: 

Room  1728  located  inside  the  Loews  Regency  Hotel  at  540  Park  Avenue,  New  York,  New 
York  10065.  The  building  is  a  luxury  hotel  located  on  Park  Avenue  and  61st  Street.  Subject 
Premises-4  is  located  on  the  1 7th  floor  of  the  hotel. 

n.  Items  to  Be  Seized 


A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  firom  Subject  Premises-4  are  evidence^  fruits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows; 

a.  Evidence  relating  to  Sterling  National  Banlc,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1, 2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 

entities  associated  with  him  to  transfe^n^ntoest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  and/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  fi’om  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Constiltants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  pmpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates.  • 

f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  armUal  income,  income  soiu'ces,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  rehirns,  personal  financial  statements,  and  banlc  records,  from  January  1, 
2013  to  the  present. 

g.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

Cohen  and 


I 

ii 

I 


!■: 


I 

ii 

I 
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and  any  payments  by 

h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Kaizen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
“David'  Pech:a7“amd/oi^Dylan~Howard”about“Donald“Tiimiprthe“Trump~Campaign7  Stephani^^^^ 

Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  wMi  Donald  Trump  and/or  agents  or  associates  of  the 
Tmmp  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Tmmp’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbui'sement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  loiov^ledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  conhibution  limits. 

0.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  banic  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 

p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  puipose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entily  associated  with  an  account  at  a 
financial  institution;  the  som'ce  of  funds  flowing  into  an  account;  or  the  purpose  or  natoe  of  any 
financial  transactions  involving  that  financial  institution,  fi‘om  January  1,  2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-4  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  foiih  in  Section  II.A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  Pro, 
any  other  deslctop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-4  also  include; 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media;  including  but  not  limited  to  any  physical  keys,  encr5^tion 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  information 

_mncerningThe  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. _ 

3 .  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizurc  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  ofScem  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

*  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer- 
believed  to  contain  pertinent  files); 

e  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

•  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

e  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

»  reviewing  metadata,  system  information,  configm'ation  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files^ 
documents^  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
ILA  and  II,B  of  this  Attachment.  However^  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally^  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate^  the  procedui'es  shall  include 
use  of  a  designated  “filter  team/^  sepai‘ate  and  apait  from  the  investigative  team^  in  order  to 
addi*ess  potential  privileges. 
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AO  93  (SONY  Rev,  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

'  for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of  ) 

(Briefly  describe  the  property  to  be  searched  ) 

or  identify  the  person  by  name  and  address)  )  Case  No. 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1728,  ^ 

New  York,  New  York  10065,  and  any  closed 
containers/items  contained  therein,  See  Attachment  D  ^ 

SEARCH  AND  SEIZURE  WARRANT 


To:  Any  ^horized'law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 
of  the  following  person  or  property  located  in  the  _ Southern  District  of  _ _ New  York _ 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location) : 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1728,  New  York,  New  York  10065,  and  any  closed  containers/items 
contained  therein.  See  Attachment  D 

The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized) : 


See  Attachment  D 

I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 
property. 

YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before  _ 

(not  to  ejcceed  1 4  days) 

Sf  in  the  da3d;ime  6:00  a.m.  to  10  p.m.  □  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

established. 


Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  Warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  of  the  Court. 

_ Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Court. _ 

USMJ  Initials 


□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 
searched  or  seized  (check  the  appropriate  box)  Dfor  days  (not  to  exceed  30). 

□until,  the  facts  justifying,  the  later  specific  date  of  _ 


Date  and  time  issued: 


hi  Hrrvfy 

*  f  judge  *s  signature 


I 

I 


I 


I 

I 

I 


I 

I 

I 

I 

I 


I 

I 

I 


City  and  state;  New  York.  NY 


Hon.  Henry  B.  Pitman.  U.S.  Magistrate  Judge 

Printed  name  and  title 
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AO  93  (Rev.  01/09)  Search  and  Seizure  Warrant  (Page  2) 


Return 

Case  No.: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 

Certification 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court. 


Date:  _  _ 

Executing  ojficer  signature 


Printed  name  and  title 
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ATTACHMENT  D 

I.  Premises  to  be  Searched — Subject  Premises-4 

The  premises  to  be  searched  (“Subject  Premises-4”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein: 

Room  1728  located  inside  the  Loews  Regency  Hotel  at  540  Park  Avenue,  New  York,  New 
York  10065.  The  building  is  a  luxury  hotel  located  on  Park  Avenue  and  61st  Street.  Subject 
Premises-4  is  located  on  the  1 7th  floor  of  the  hotel. 

n.  Items  to  Be  Seized 

^  ArflEvidence,  Frni^andTnsfrumentalities^fthe^Subjecf  Offenses  " 

The  items  to  be  seized  from  Subject  Premises-4  are  evidence,  fruits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(banlc  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows; 

a.  Evidence  relating  to  Sterling  National  Bank,  Mehose  Credit  Union,  and/or  taxi 
medallions,  from  January  1, 2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfe^n^nteigst  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  |^^^^^^^H|and/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates.  ■ 

f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
2013  to  the  present. 

g.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

Cohen  and^^^^^^^^^^^^^^^^^^Hand/or  controlled  by 
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1,  2012  to  the  present. 


and  any  payments  by  I 


Ito  Cohen,  from  January 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  then- 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 


i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Eecker,-and/or— Dylan  Howard-about-Donald  Trump, -the  Trump-Caihpaign,-Stephanie- 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Tmmp  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbiarsement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 


n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p.  Commxmications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1, 2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B,  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-4  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  II.A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  Pro, 
any  other  desktop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  dr  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-4  also  include; 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media;  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  information 
concerning  the  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. 

3 .  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  imder 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

•  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

•  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

•  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

•  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
ILA  and  II-B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to 
address  potential  privileges. 
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AO  93  (SDNY  Rev.  05/10)  Search  and  Seizure  Wairant 


United  States  District  Court 

for  the 

Soutliern  District  of  New  York 


In  the  Matter  of  the  Seai*ch  of 
(Briefly  describe  ihe  property  to  he  searched 
or  identify  the  person  by  name  and  address) 

An  Apple  iPhone  with  Phone  Number  | 

See  Attachment  E 


) 

) 

) 

) 

) 

) 


Tor 


SEARCH  AND  SEIZURE  WARRANT 
Any  totfioriz^OT  enfoiTCment  officer 


An  application  by  a  federal  law  enforcement  officer  or  an  attomey  for  the  government  requests  the  search 
ofthe  following  person  or  propeity  located  in  the  Southern  Distiictof  _ New  York 

(identify  the  person  or  describe  the  property  to  Us  location)'. 

An  Apple  iPhone  with  Phone  Number  See  Attachment  E 


The  person  oi  pioperty  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)'. 

See  Attachment  E 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  seai*ch  and  seize  the  person  or 

, ^  1 1  i  I )  / 1 .) , 


propei-ty. 

YOU  ARE  COMMANDED  to  execute  this  waiTant  on  or  before 


.  ,  '  ,  ^  to  e'jiceed  14  days) 

0  in  the  daytime  6:00  a.m,  to  10  p.m.  □  at  any  time  in  the  day  or  iiight  as  I  find  reasonable  cause  has  been 

established.  u  ,  '  V  '  ' 


Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  ofthe  watTant  and  a  receipt  for  the  propeily 
taken  to  the  person  fmin  whom,  or  fi*om  whose  premises,  tlae  propeity  was  tjyceit,  nr;leavd  thh  copy  a!hd  receipt  at  the 
place  where  the  propeity  was  taken.  '  .  .  ,  .  '  ! 

The  officer  executing  this  wairant,  or  an  officer  present  during  the  execiitipk  Of  tbd  warm  prepare  an 

inventoiy  as  required  by  law  and  promptly  return  tliis  wairant  and  inventory  to  the  Cleik  bf  the  Pomtl 
_ Upon  its  return,  this  warrant  and  inventoiy  should  be  filed  under  seal  by  the  Clerk  dt  the  Couit. 


VSMJ  Initials 


□  I  find  tliat  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  wairant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 
seai'ched  or  seized  (checkihe  appropriate  box)  Ofor  _ days  (not  to  exceed 30).  , .  t  \  I  i !  i  ,  , 

□rmtil,  the  facts  justifying,  the  latsf  si)eriifid  c(afe/  6f  _ 

Date  and  time  issued;  V  -  /S' 

7-  f  (■/  r/r) 

City  and  state:  .New  York,  NY — ^ -  - Hon.  Henn/;^.  Plfa'rian;  'UiSvMaai3trafR<'.liidr|a 

Printed  name  mid  tide 


.  Judge  *S;flgndiure 


•; 

i 
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Returii 

Case  No,: 

Date  and  time  warrant  executed; 

Copy  of  warrant  and  inventory  left  witli: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  properly  taken  and  name  of  any  person(s)  seized; 

Certification 


I  declai’e  under  penalty  of  peijuiy  that  this  inventory  is  correct  and  was  retui'ned  along  with  the  original  warrant 
to  the  Comt. 


Date:  _ _  _ _ 

E:(ecutwg  officer  *s  signature 


Printed  name  and  title 
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ATTACHMENT  E 

I.  Device  Subject  to  Search  and  Seizure  —  Subject  Device-1 

The  device  that  is  the  subject  of  this  seai'ch  and  seizure  warrant  (“Subject  Device- 1”)  is 
described  as  follows: 


An  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number 


Dming  the  execution  of  this  search  waiTant,  law  enforcement  personnel  are  authorized  to 
depress  the  fingeipiints  and/or  thumbprints  of  Michael  Cohen  onto  the  Touch  ID  sensor  of  Subj  ect 
Device- 1,  or  hold  Subject  Device- 1  in  front  of  Cohen’s  face  to  activate  the  Face  ID  sensor,  in  order 
to  gain  access  to  the  contents  of  any  such  device  as  authorized  by  this  warrant. 


11.  Review  of  ESI  on  the  Subject  Device 

Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and  agents, 
and  depending  on  the  natoe  of  the  ESI  and  the  status  of  the  investigation  and  related  proceedings, 
attorneys  for  the  goveiTiment,  attorney  support  staff,  agency  personnel  assisting  the  government  in 
this  investigation,  and  outside  technical  experts  under  government  control)  are  authorized  to 
review  the  ESI  contained  on  Subject  Device- 1  for  evidence,  hurts,  and  inshumentalities  of 
violations  of  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other  Subject  Offenses),  1005  (false 
banlc  entries),  1014  (false  statements  to  a  fmancial  institution),  1343  (wire  hand),  and  1344  (banlc 
fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions) 
(the  “Subject  Offenses”)  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Banlc,  Mehose  Q-edit  Union,  and/or  taxi 
medaUions,  fi-om  January  1, 2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transferan^nterest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to^^^^^^^Hrnd/or  entities  associated  with  him, 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Mehose. 

d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  or 
communications  that  indicate  the  natoe  and  purpose  of  payments  made  to  or  fium  Essential 
Consultants  or  the  nature  of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with 
Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
or  communications  that  indicate  the  nature  and  pmpose  of  payments  made  to  or  from  Michael  D. 
Cohen  &  Associates,  or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D. 
Cohen  &  Associates. 
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f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  thi'ough 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  firom  January  1, 
2013  to  the  present 


g^Evidaic^elatin^^agreMi^ts,  loans,  and/or  financial  transactions  between 
Cohen  and  entities  controlled  by 


,  AV  i  A  xo  me  present 


and  any  payments  byl 


I  to  Cohen,  fiom  January 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their- 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 


i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Tr-ump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal, 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Tr-ump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
pubhcity  involving  Trump’s  relationship  in  the  rim  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  repor-ting  requirements,  and  campaign  conb-ibution  limits. 

o.  Communications  with  others,  including  Jeffi-ey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  banlc  accounts,  taxes,  debts,  and/or  finances,  fi-orn  Januar-y  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  soui-ce  of  funds  flowing  into  an  account;  or  the  purpose  or  natme  of  any 
financial  transactions  involving  that  financial  institution,  fi-om  Januai-y  1, 2013  to  the  present. 
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If  the  Govei-mnent  determines  that  Subject  Device- 1  is  no  longer  necessary  to  retrieve  and 
preserve  the  data  on  the  device,  and  that  Subject  Device-1  is  not  subject  to  seizure  pui'suant  to 
Federal  Rule  of  Criminal  Procedure  41(c),  the  Government  will  return  Subject  Device- 1,  upon 
request. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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AO  93  (SDNY  Rev.  05/10)  Search  and  Seizure  Warrant 

I 

United  States  District  Court  j 

for  the  I 


Southern  District  of  New  York 


I 


In  the  Matter  of  the  Search  of 


(Briefly  describe  the  property  to  he  searched 
or  identify  the  person  by  name  and  address) 


An  Apple  iPhone  with  Phone  Number 
See  Attachment  E 


) 

) 

) 

) 

) 

) 


Case  No. 


SEARCH  AND  SEIZURE  WARRANT 


To:  Any  authorizedlaw  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 
of  the  following  person  or  property  located  in  the  _ Southern  District  of  _ New  York 

(identify  the  person  or  describe  the  property  to  its  location)  \ 

An  Apple  iPhone  with  Phone  N umber See  Attachment  E 


I 


ii 


The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)  \ 

See  Attachment  E 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 
property. 

YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before  [t _ _ 

(not  to  exceed  14  days) 

Sf  in  the  daytime  6:00  a.m.  to  10  p.m.  □  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

established. 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  of  the  Court. 

_ Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Court. _ _ 

USMJlnitials 


□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 
searched  or  seized  (check  the  appropriate  box)  Ofor  _____  days  (not  to  exceed  30). 

□until,  the  facts  justifying,  the  later  specific  date  of  _ 


Date  and  time  issued:  .r». 


1^1  (~('C'r>ry 

*  {  Judge  *s  signature 


City  and  state:  New  York.  NY 


Hon.  Henry  B.  Pitman.  U.S.  Magistrate  Judge 

Printed  name  and  title 
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Return 

Case  No.: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 

Certification 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court, 


Date:  _  _ 

Executing  officer  *s  signature 


Printed  name  and  title 
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ATTACHMENT  E 


L  Device  Subject  to  Search  and  Seizure  -  Subject  Device-1 


The  device  that  is  the  subject  of  this  search  and  seizure  warrant  (“Subject  Device-1”)  is 
described  as  follows: 


An  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number 


During  the  execution  of  this  search  warrant,  law  enforcement  persoimel  are  authorized  to 
depress  the  fingerprints  and/or  thumbprints  of  Michael  Cohen  onto  the  Touch  ID  sensor  of  Subject 
Device- 1,  or  hold  Subject  Device- 1  in  front  of  Cohen’s  face  to  activate  the  Face  ID  sensor,  in  order 
to  gain  access  to  the  contents  of  any  such  device  as  authorized  by  this  warrant. 


n.  Review  of  ESI  on  the  Subject  Device 

Law  enforcement  persoimel  (including,  in  addition  to  law  enforcement  officers  and  agents, 
and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and  related  proceedings, 
attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the  government  in 
this  investigation,  and  outside  technical  experts  under  government  control)  are  authorized  to 
review  the  ESI  contained  on  Subject  Device- 1  for  evidence,  fruits,  and  instrumentalities  of 
violations  of  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other  Subject  Offenses),  1005  (false 
bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344  (bank 
fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions) 
(the  “Subject  Offenses”)  described  as  follows: 


a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1 , 20 1 3  to  the  present. 


b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 


liabilities,  to  others,  including  to 


Imd/or  entities  associated  with  him. 


c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 


d.  Evidence  relating  to  Essential  Consultants,  EEC,  including  any  documents  or 
communications  that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential 
Consultants  or  the  nature  of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with 
Essential  Consultants. 


e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
or  communications  that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D. 
Cohen  &  Associates,  or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D. 
Cohen  &  Associates. 


i 
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f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  fiom  January  1, 
2013  to  the  present. 


Evidence  relating  to  agreements,  loans,  and/or  financial  traisaction^be^em 

|and/or  entities  controlled  by 

^^^^|to  Cohen,  fiom  January 


,  and  any  payments  by 


1, 2012  to  the  present. 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 


i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  eoordination  or 
eonsultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  assoeiates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sourees  of  negative 
publieity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  eampaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  aceountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  fiom  January  1,  2013  to  the 
present. 


p.  Communieations,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  aeeount  or  loan  at 
that  fmaneial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  fiom  January  1, 2013  to  the  present. 
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If  the  Government  determines  that  Subject  Device- 1  is  no  longer  necessary  to  retrieve  and 
preserve  the  data  on  the  device,  and  that  Subject  Device-1  is  not  subject  to  seizure  pursuant  to 
Federal  Rule  of  Criminal  Procedure  41(c),  the  Government  will  return  Subject  Device- 1,  upon 
request. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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United  States  District  Court 

for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of 
(Briefly  describe  the  properly  to  he  searched 
or  identify  the  person  by  name  and  address) 

An  Apple  iPhone  with  Phone  Number 
See  Attachment  F 


SEARCH  AND  SEIZURE  WARRANT 


To:  Any  authoiized  law  enforcement  officer 


An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  seai‘ch 
ofthe  following  person  or  property  located  in  the  Southern  District  of  _ New  York 

(identify  the  person  or  describe  the  property  to  its  location) 

An  Apple  iPhone  with  Phone  Number  ^^^^^^Hsee  Attachment  F 


The  person  or  properly  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)'. 

See  Attachment  F 

...  j  'i  U;  I  i  ,i  )  ;  . 

I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  sem'ch  or 

property.  ^  '' 

YOU  ARE  COMMANDED  to  execute  this  warrant" on  or  before  ^  ^  n'.--,  ^ 

(not  p  exceed  14  dtfys) 

sf  in  the  daytime  6:00  a.m.  to  10  p.m.  O  at  any  time  in  the  day  or  night  as  I  finc|  rehsouqbjle  cause  h^s  been 

established.  ’lY  /  i  Y 

^  ■'  ^  ^  / 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  wan‘ant  and  a  receipt  fof  the  ppopdlty 
taken  to  the  person  from  whom^  or  from  whose  premises,  the  property  was  taken,  or  leave  the,  copy  and  receipt  at  thei 
place  where  the  propeity  was  taken.  ’  '  . , 

The  officer  executing  this  warrant,  or  an  officer  present  dui’ing  the  execution  of  the  waiTunt,  must  prepare  an 
inventoiy  as  required  by  law  and  promptly  return  this  wairant  aiid  inventoiy  to  the  Clerk  of  the  Couit. 

_ Upon  its  return,  this  wan^ant  and  inventoiy  should  be  filed  under  seal  by  the  Clerk  of  the  Couit. _ 

USMJ  Initials 


□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 
searched  or  seized  (check  the  appropriate  box)  □for  _ days  (not  to  exceeded).  , .  .  , 


Date  and  time  issued; 


□until,  the  facts  justifying,  the  later  specific  date  of,  i 


7- 


Judge  'ssl^tature 


City  and  state:  New  York.  NY 


Hon.  Henry  B.  Pitman.  U.S.  Magistrate  Judge 

Printed  name,  and  title 


Case  l:18-cr-00602-WHP  Document  48-1  Filed  07/18/19  Page  262  of  269 


ATTACHMENT  F 


I.  Device  Subject  to  Search  and  Seizure  —  Subject  Device-2 

The  device  that  is  the  subject  of  this  search  and  seizure  warrant  (“Subject  Device-2”)  is 
described  as  follows: 


An  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number 


Dming  the  execution  of  this  search  waixant,  law  enforcement  personnel  are  authorized  to 
depress  the  fingeiprints  and/or  thumbprints  of  Michael  Cohen  onto  the  Touch  ID  sensor  of  Subject 
Device-2,  or  hold  Subject  Device-2  in  front  of  Cohen’s  face  to  activate  the  Face  ID  sensor,  in  ordei' 
to  gain  access  to  tire  contents  of  any  such  device  as  authorized  by  this  warrant. 


n.  Review  of  ESI  on  the  Subject  Device 

Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and  agents, 
and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and  related  proceedings, 
attorneys  for  the  government,  attorney  support  staff,  agency  persoimel  assistmg  the  government  in 
this  investigation,  and  outside  technical  experts  under  government  control)  are  authorized  to 
review  the  ESI  contained  on  Subject  Device-2  for  evidence,  fruits,  and  mstrumentahties  of 
violations  of  18  U.S.C.  §§  371  (consphacy  as  it  pertains  to  the  other  Subject  Offenses),  1005  (false 
bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wke  fi:aud),  and  1344  ^ank 
fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions) 
(the  “Subject  Offenses”)  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1, 2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  ^^^^^^^^^md/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loairs  that  Cohen  has 
with  Sterling  and/or  Mehose. 

d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  or 
communications  that  indicate  the  natui'e  and  pmpose  of  payments  made  to  or  fi'om  Essential 
Consultants  or  the  nature  of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with 
Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
or  commmiications  that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D. 
Cohen  &  Associates,  or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D. 
Cohen  &  Associates. 
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f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
20 1 3  to  the  present. 


Cohen  and 


Evidence  relating  to  agreements,  loans,  and/or  financial  tonsactionsbetwe^ 

|and/or  entitie^onfrolle^yH^^|^H^|^| 
and  any  payments  by^^^^^^^Hto  Cohen,  from  January 


1, 2012  to  the  present 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  then 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 


i.  Evidence  of  communications  involvhig  Michael  Cohen,  Donald  Trirmp  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howar'd  about  Donald  Tramp,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Tramp  Campaign,  and  coordination  or 
consultation  with  the  Tramp  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Tr-ump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relatmg  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Chfford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  Icnowledge  of  the  campaign  finance  laws,  campaign 
contribution  r'eporting  requfrements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  banlc  accormts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  tire 
present. 


p.  Communications,  records,  documents,  apd  other  files  reflecting  false 
representatiorrs  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  pmpose  or  nahire  of  any 
financial  fr'ansactions  involving  that  financial  institution,  from  January  1, 2013  to  the  present. 


2017.08.02 


21 


Case  l:18-cr-00602-WHP  Document  48-1  Filed  07/18/19  Page  264  of  269 


If  the  Government  deteitnines  that  Subject  Device-2  is  no  longer  necessary  to  retrieve  and 
preserve  the  data  on  the  device,  and  that  Subject  Device-2  is  not  subject  to  seizm'e  pursuant  to 
Federal  Rule  of  Criminal  Procedm’e  41(c),  the  Government  will  return  Subject  Device-2,  upon 
request. 

Additionally,  review  of  the  items  described  in  this  Attaclnnent  shall  be  conducted  pui'suant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  flnm  the  investigative  team,  in  order  to  address 
potential  privileges. 
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AO  93  (SDNY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of  ) 

(Briefly  describe  the  property  to  be  searched  ) 

or  identify  the  person  by  name  and  address)  )  Case  No. 

An  Apple  iPhone  with  Phone  Number 
See  Attachment  F 


SEARCH  AND  SEIZURE  WARRANT 


To:  “Any  authorizedlaw  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 

of  the  following  person  or  property  located  in  the  _ Southern  District  of  _ New  York 

(identify  the  person  or  describe  the  property  to  Us  location)  \ 

An  Apple  iPhone  with  Phone  Number^^^^^^^^l^ee  Attachment  F 


The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)'. 

See  Attachment  F 

I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 
property. 

YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before  _ 

(not  to  exceed  14  days) 

Sf  in  the  daytime  6:00  a.m.  to  10  p.m.  □  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

established. 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  of  the  Court. 

Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Court. _ 

USMJ  Initials 

□  I  fmd  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 
searched  or  seized  (check  the  appropriate  box)  Ofdr  days  (not  to  exceed  30). 

□until,  the  facts  justifying,  the  later  specific  date  of  _ . 

Date  and  time  issued:  Ul  Hr^fy  B.  _ 

g.  I  /  Judge 's  signature 


City  and  state:  New  York.  NY 


Hon.  Henry  B.  Pitman.  U.S.  Magistrate  Judge 

Printed  name  and  title 
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AO  93  (Rev.  01/09)  Search  and  Seizure  Warrant  (Page  2) 


Return 

Case  No.: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 

Certification 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court. 


Date:  _  _ 

Executing  officer's  signature 


Printed  name  and  title 
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ATTACHMENT  F 

I.  Device  Subject  to  Search  and  Seizure  -  Subject  Device-2 


The  device  that  is  the  subject  of  this  search  and  seizure  warrant  (“Subject  Device-2”)  is 
described  as  follows: 


An  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number 


During  the  execution  of  this  search  warrant,  law  enforcement  personnel  are  authorized  to 
depress  the  fingerprints  and/or  thumbprints  of  Michael  Cohen  onto  the  Touch  ID  sensor  of  Subject 
Devlce-2,  or  hold  Subject  Device-2  in  front  of  Cohen’s  face  to  activate  the  Face  ID  sensor,  in  order 
to  gain  access  to  the  contents  of  any  such  device  as  authorized  by  this  warrant. 


II,  Review  of  ESI  on  the  Subject  Device 

Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and  agents, 
and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and  related  proceedings, 
attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the  government  in 
this  investigation,  and  outside  technical  experts  under  government  control)  are  authorized  to 
review  the  ESI  contained  on  Subject  Device-2  for  evidence,  fruits,  and  instrumentalities  of 
violations  of  18  U.S.C.  §§371  (conspiracy  as  it  pertains  to  the  other  Subject  Offenses),  1005  (false 
bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344  (bank 
fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions) 
(the  “Subject  Offenses”)  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medalhons,  from  January  1, 2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 

entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  and/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Mehose. 

d.  Evidence  relating  to  Essential  Consultants,  EEC,  including  any  documents  or 
communications  that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential 
Consultants  or  the  nature  of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with 
Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
or  communications  that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D. 
Cohen  &  Associates,  or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D. 
Cohen  &  Associates. 
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f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
2013  to  the  present. 


Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 


and/or  entities  controlled  by] 


and  any  payments  by  ] 


|to  Cohen,  from  January 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 


i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 

p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  accormt  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1, 2013  to  the  present. 
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If  the  Government  determines  that  Subject  Device-2  is  no  longer  necessary  to  retrieve  and 
preserve  the  data  on  the  device,  and  that  Subject  Device-2  is  not  subject  to  seizure  pursuant  to 
Federal  Rule  of  Criminal  Procedure  41(c),  the  Government  will  return  Subject  Device-2,  upon 
request. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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United  States  District  Court 

for  the 


Southern  District  of  New  York 


In  the  Matter  of  the  Search  of 


(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

Loews  Regency  Hotel,  540  Park  Avenue,  Room 
1628 


ISMAG 


Case  No. 


APPLICATION  FOR  A  SEARCH  AND  SEIZURE  WARRANT 

property  to  be  searched  and  give  its  location). 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1628,  a  Suite  that  Encompasses  Rooms  1628, 1629,  and  1630  New  York,  New  York  100 

_ New  York  ,  there  is  now  concealed  (ident^y  the 


iacatedinThe- 


-Southern- 


-District-oft- 


person  or  describe  the  property  to  be  seized)'. 

See  Attached  Affidavit  and  its  Attachment  A 


The  basis  for  the  search  under  Fed.  R.  Crim.  P.  41(c)  is  (check  one  or  more)'. 

S^vidence  of  a  crime; 

0^ontraband,  fruits  of  crime,  or  other  items  illegally  possessed; 

S^roperty  designed  for  use,  intended  for  use,  or  used  in  committing  a  crime, 

□  a  person  to  be  arrested  or  a  person  who  is  unlawfully  restrained. 

The  search  is  related  to  a  violation  of: 

CodeSecmn(s)  Offeme  Descnption(s) 

18  use  371. 1005, 1014. 1343.  Conspiracy,  false  bank  entries,  false  statements  to  a  financial 
1344;  52  usc  30116  and  30109  institution,  Wire  fraud,  bank  fraud,  and  illegal  campaign  contributions 

The  application  is  based  on  these  facts: 

See  Attached  Affidavit  and  its  Attachment  A 


gf  Continued  on  the  attached  sheet. 

□  Delayed  notice  of  30  _  days  (give  exact  ending  date  if  more  than  30  days: 

...  1  ofrf-QnVlP'YI  QPIP.Pl'f 


under  18  U.S.C.  §  3103a,  the  basis  of  which  is  set  forth  on  the  attached  sheet. 


Sworn  to  before  me  and  signed  in  my  presence. 


)  is  requested 


Date 


City  and  state:  New  York,  NY 


I^TDAorcvbU  - - 

Printed  name  apd  title  ! 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  the  Application  of  the  United 
States  of  America  for  a  Search  and  Seizure 
Warrant  for  the  Premises  Known  and  Described 
as  Loews  Regency  Hotel,  540  Park  Avenue, 
Room  1628,  a  Suite  that  Encompasses  Rooms 
1628,  1629,  and  1630  New  York,  New  York 
10065,  and  Any  Closed  Containers/Items 
Contained  Therein 
Reference  No.  2018R00127 


TO  BE  FILED  UNDER  SEAL 

Agent  Affidavit  in  Support  of 
Application  for  Search  and  Seizure 

Warrant 


SOUTHERN  DISTRICT  OF  NEW  YORK)  ss.: 


Special  Agent  Federal  Bureau  of  Investigation,  being  duly  sworn. 


deposes  and  says: 

1.  Introduction 
A.  Affiant 

1 .  I  am  a  Special  Agent  with  the  Federal  Bureau  of  Investigation  (“FBF’),  I  have  been 
a  Special  Agent  with  the  FBI  since  2009.  In  the  course  of  my  experience  and  training  in  these 
positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a  wide  array 
of  financial  crimes,  including  frauds  on  financial  institutions,  as  well  as  into  offenses  involving 
public  corruption.  I  also  have  training  and  experience  executing  search  warrants,  including  those 
involving  electronic  evidence. 

2.  On  or  about  April  8,  2018,  the  Honorable  Henry  B.  Pitman,  United  States 
Magistrate  Judge,  issued  a  search  and  seizure  warrant  for  the  premises  known  and  described  as 
Loews  Regency  Hotel,  540  Park  Avenue,  Room  1728,  New  York,  New  York  10065,  and  Any 
Closed  Containers/Items  Contained  Therein.  The  warrant  and  my  supporting  affidavit  (the 
“Affidavit”)  are  appended  hereto.  The  Affidavit  is  incorporated  herein  by  reference  in  its  entirety 
as  Exhibit  A. 
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3,  On  or  about  April  9, 2018,  based  upon  a  conversation  with  another  law  enforcement 
agent  who  spoke  to  an  employee  of  Loews  Regency  Hotel,  I  learned  that  Michael  Cohen  is  in  fact 
staying  in  Room  1628  (in  a  suite  encompassing  rooms  1628, 1629,  and  1630)  (collectively,  “Room 
1628”),  not  Room  1728.  Accordingly,  I  respectfully  submit  the  attached  amended  warrant 
pursuant  to  Rule  41  of  the  Federal  Rules  of  Criminal  Procedure  for  the  following  Subject  Premises: 
Loews  Regency  Hotel,  540  Park  Avenue,  Room  1628,  New  York,  New  York  10065,  and  Any 
Closed  Containers/Items  Contained  Therein  (“Subject  Premises-4”).  For  the  reasons  detailed  in 
the  Affidavit  and  herein,  1  believe  that  there  is  probable  cause  to  believe  that  Subject  Premises-4 

contains  evidencerliTJits;^andYnstrumentalities“of'vioratiOns  of“l  8  UiS.G^§§H005^(false-banR 

entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344  (bank  fraud) 
(collectively,  the  “Bank  Fraud  Offenses”),  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l) 
(illegal  campaign  contributions)  (the  “Campaign  Finance  Offenses”),  and  18  U.S.C.  §§  371 
(conspiracy  as  it  pertains  to  the  other  Subject  Offenses)  (collectively,  the  “Subject  Offenses”). 

4.  Based  on  the  foregoing,  I  respectfully  request  the  court  to  issue  a  warrant  to  seize 
the  items  and  information  specified  in  Attachment  A  to  this  affidavit  and  to  the  Search  and  Seizure 
Warrant. 
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5.  In  light  of  the  confidential  nature  of  the  continuing  investigation,  I  respectfully 
request  that  this  affidavit  and  all  papers  submitted  herewith  be  maintained  under  seal  until  the 
Court  orders  otherwise. 


Special  Agent 


FBI 

Sworn  to  before  me  on  fy 
9th  day  of  April,  2018 


UNITED  STATES  MAGISTRATE  JUDGE 
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ATTACHMENT  A 

L  Premises  to  be  Searched — Subject  Premises-4 

The  premises  to  be  searched  (“Subject  Premises-4”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein; 

Room  1628  (a  suite  encompassing  rooms  1628,  1629,  and  1630)  (collectively,  “Room 
1628”),  located  inside  the  Loews  Regency  Hotel  at  540  Park  Avenue,  New  York,  New  York 
10065.  The  building  is  a  luxury  hotel  located  on  Park  Avenue  and  61st  Street.  Subject  Premises- 
4  is  located  on  the  16th  floor  of  the  hotel. 

n.  Items  to  Be  Seized 

A.  Evidence,  Emits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from  Subject  Premises-4  are  evidence,  fruits,  and  instrumentalities 

of  violations  of  18  U.S.C.  §§  371  (conspiracy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fiuud),  and  1344 
(banlc  fi-aud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Mehose  Credit  Union,  and/or  taxi 
medallions,  from  January  1, 2013  to  the  present. 


b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 


liabilities,  to  others,  including  to 


Imd/or  entities  associated  with  him. 


c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 


d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
inHicatp;  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 

f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
2013  to  the  present. 

g.  Evidence  relating  to  agreements,  loans,  and/or  financial  tonsactionsbetw^ 

Cohen  and^^^^^^^^^^^^^^^^^^|and/or  by 
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1, 2012  to  the  present. 


and  any  payments  byl 


Ito  Cohen,  from  January 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 


i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 

consultation  withthe"Trump“Campaign.  “  . 


l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
pubUcity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1, 2013  to  the  present. 

q.  Evidence  of  Cohen’ s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-4  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  HA  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  Pro, 
any  other  desktop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-4  also  include: 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  information 
concerning  the  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. 

3 .  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 


C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

•  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

•  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
then  precise  contents; 

•  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

o  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

«  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
II.A  and  11.8  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  fi-om  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team  ”  separate  and  apart  horn  the  investigative  team,  in  order  to 
address  potential  privileges. 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  the  Application  of  the  United  ; 
States  of  America  for  a  Search  and  Seizure  ; 
Wan-ant  for  the  Premises  Known  and  Described  i 


as  (1)  502  Park  Avenue,  | 


iNew  : 


York,  New  York  10022,  (2)  Michael  Cohen’s  : 
Office  at  30  Rockefeller  Plaza,  23rd  Floor,  New  ; 
York,  New  York  101 12,  (3)  Safe  Deposit  Box  #  : 
^[Located  at  the  TD  Bank  Branch  at  500  Park 
Avenue,  New  York,  New  York  10019,  and  (4)  ; 
Loews  Regency  Hotel,  540  Park  Avenue,  Room  : 
1728,  New  York,  New  York  10065,  and  Any  ; 
Closed  Containers/Items  Contained  Therein,  and  : 
the  Electronic  Devices  Known  and  Described  as  : 
fTLamAnple^iPhone-with-Phone^Number-j^^^- 
|md  (2)  an  Apple  iPhone  with  Phone; 


Number  _ 

Reference  No.  2018R00127 


TO  BE  FILED  UNDER  SEAL 

Agent  Affidavit  in  Support  of 
Application  for  Search  and  Seiznre 

Warrant 


SOUTHERN  DISTRICT  OF  NEW  YORK)  ss.: 

Special  Agent,  Federal  Bureau  of  Investigation,  being  duly  sworn, 

deposes  and  says: 

1.  Introduction 
A.  Affiant 

1 .  I  am  a  Special  Agent  with  the  Federal  Bureau  of  Investigation  (“FBI”).  I  have  been 
a  Special  Agent  with  the  FBI  since  2009.  In  the  course  of  my  experience  and  training  in  these 
positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a  wide  array 
of  financial  crimes,  including  frauds  on  financial  institutions,  as  well  as  into  offenses  involving 
public  corruption.  I  also  have  training  and  experience  executing  search  warrants,  including  those 
involving  electronic  evidence. 

2.  I  raalce  this  Affidavit  in  support  of  an  application  pursuant  to  Rule  41  of  the  Federal 
Rules  of  Criminal  Procedure  for  a  warrant  to  search  the  premises  specified  below  (the  “Subject 
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Premises”)  and  the  electronic  devices  specified  below  (the  “Subject  Devices”)  for,  and  to  seize, 
the  items  and  infonnation  described  in  Attachments  A,  B,  C,  D,  E  and  F.  This  affidavit  is  based 
upon  my  personal  knowledge;  my  review  of  documents  and  other  evidence;  my  conversations  with 
other  law  enfoi'cement  personnel;  and  my  training,  experience  and  advice  received  concerning  the 
use  of  electronic  devices  in  criminal  activity  and  the  forensic  analysis  of  electronically  stored 
infonnation  (“ESI”).  Because  this  affidavit  is  being  submitted  for  the  limited  purpose  of 
establishing  probable  cause,  it  does  not  include  all  the  facts  that  I  have  learned  during  the  course 
of  my  investigation.  Where  the  contents  of  documents  and  the  actions,  statements,  and 

Tnnversations  of  others  are  reported  herein7  they  are  reported  in  substanee  and  in  parVexeeptwhere 


otherwise  indicated. 

B.  The  Subject  Premises  and  Subject  Devices 

3.  Subject  Premises- 1,  Subject  Premises-2,  Subject  Premises-3  and  Subject  Premises- 


4  (collectively,  the  “Subject  Premises”)  are  particularly  described  as: 

a.  Subject  Premises-1  is  Apartment  ^(located  inside  the  building  at  502 
Park  Avenue,  New  York,  New  York  10022.  The  building  located  at  502  Part  Avenue  is  a  32- 
floor  brick  residential  building.  Subject  Premises-1  is  located  on  thej^^^^loor  of  the  building. 
Based  on  my  review  of  New  York  City  property  records,  I  have  learned  that  Michael  Cohen  and 
Laura  Cohen  own  Subject  Premises-1.^  Additionally,  as  described  below.  Subject  Premises-1  is 
Cohen’s  full-time  residence. 

b.  Subject  Premises-2  is  an  office  located  on  the  23rd  floor  of  the  building  at 
30  Rockefeller  Plaza,  New  York,  New  York  10112.  The  building  located  at  30  Rockefeller  Plaza 


'  As  noted  infra,  I  have  learned  that  on  or  about  October  28,  2015,  Cohen  transfeired  Subject 
Premises-1  into  a  trust. 
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is  a  66-floor  office  building  that  spans  the  entire  block  between  Sixth  Avenue  and  Rockefeller 
Plaza.  Subject  Premises-2  is  located  on  the  23rd  floor  of  the  building  inside  of  die  offices  of  the 
law  firm  Squire  Patton  Boggs.  The  office  is  assigned  to  Michael  Cohen.  As  described  below, 
Michael  Cohen  works  and  conducts  meetings  at  Subject  Premises-2. 

c.  Subject  Premises-3  is  a  safety  deposit  box  located  inside  the  TD  Bank 

branch  location  at  500  Pai'k  Avenue,  New  York,  New  York  10019.  Based  on  my  review  of  records 
maintained  by  TD  Bank,  I  have  learned  that  the  safety  deposit  box  is  approximately  five  inches  by 
ten  inches  in  size,  and  is  marked  as  box^^^|rhe  safety  deposit  box  is  in  the  name  of  Michael 
GohemandBaura  Gohen^ - — — - — — — - - — — — — 

d.  Subject  Premises-4  is  Room  1728  located  inside  the  Loews  Regency  Hotel 
at  540  Park  Avenue,  New  York,  New  York  10065.  The  building  is  a  luxury  hotel  located  on  Park 
Avenue  and  61st  Street.  Subject  Pi-emises-4  is  located  on  the  17th  floor  of  the  hotel.  Based  on  my 
review  of  emails  obtained  pursuant  to  search  warrants  described  below,  I  have  learned  that  on  or 
about  January  5,  2018,  Cohen  received  an  email  from  an  employee  of  Loews  Regency,  which 
included  a  price  quote  for  a  long-term  stay  suite  based  on  a  three-month  stay  from  January  8  to 
April  8, 2018.^  On  or  about  January  29, 2018,  Cohen  sent  an  email  to  a  Loews  Regency  employee, 
stating,  in  pertinent  part:  “I  just  spoke  to  my  wife  and  she  has  scheduled  the  move  for  Thursday. 
Please  mark  down  tliat  we  will  be  taldng  possession  on  Thursday,  February  1st.”  Based  on  my 
review  of  cell  phone  location  data,  I  have  learned  that,  over  the  past  24  hours,  two  cellular  phones 
used  by  Cohen  have  been  located  in  the  vicinity  of  Subject  Premises-4.  In  paiticular,  on  or  about 


^  Although  the  quoted  price  contemplated  a  three-month  stay  from  January  8  to  April  8,  it  appears 
that  Cohen  did  not  move  in  until  February  1,  and  as  of  today,  April  8,  cellphone  location 
information  demonstrates  that  Cohen’s  cellulai"  phones  are  in  still  in  the  vicinity  of  Subject 
Premises-4. 
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April  8,  2018,  law  enforcement  agents  using  a  “t'iggerfish”  device  identified  Room  1728  as  the 
room  within  the  hotel  in  which  the  Subject  Devices  are  most  likely  present, 

e.  Therefore,  I  believe  that  Cohen  is  temporarily  residing  in  Subject 


Premises-4. 

4.  Subject  Device-1  and  Subject  Device-2  (collectively,  the  “Subject  Devices  )  aie 
particulai'ly  described  as: 

a.  Subject  Device- 1  is  an  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number 
Based  on  my  review  of  records  maintained  by  AT&T,  1  have  learned  that  Subject 

Device=Tis'subscribed  todVIichael-eohen—Based-on-my  review-of  cellphone  location-information- 

maintained  by  AT&T,  I  have  learned  that  Subject  Device- 1  is  presently  located  in  the  Southern 
District  of  New  York. 


b.  Subject  Device-2  is  an  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number 
Based  on  my  review  of  records  maintained  by  AT&T,  1  have  learned  that  Subject 
Device-2  is  subscribed  to  Michael  Cohen.  Based  on  my  review  of  cellphone  location  information 
maintained  by  AT&T,  1  have  learned  that  Subject  Device-2  is  presently  located  in  the  Southern 


District  of  New  York. 

c.  Based  on  my  training,  experience,  and  research,  and  from  consulting  the 
manufacturer’s  and  service  providers’  advertisements  and  product  technical  specifications 
available  online,  I  Icnow  that  the  Subject  Devices  have  capabilities  that  allow  them  to,  among  other 
things:  make  and  receive  telephone  callsj  save  and  store  contact  information,  send  and  receive 


^  Based  on  my  conversations  with  these  agents,  I  understand  that  it  is  also  possible  that  the  Subject 
Devices  are  one  floor  below,  in  Room  1628.  Howev er ,  as  noted,  I  understand  that  Cohen  received 
a  price  quote  for  a  long-term  stay  suite  and  is  residing  there  with  his  family.  Based  on  my 
conversations  with  FBI  agents  conducting  sui-veillance,  I  understand  that  Room  1728  appeal's  to 
be  a  suite,  whereas  Room  1628  appears  to  be  a  standard  room. 
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emails  and  text  messages;  download  and  run  mobile  telephone  applications,  including  encrypted 
call  and  messaging  application  such  as  WliatsApp,  Signal,  and  Dust;  take,  send,  and  receive 
pictures  and  videos;  save  and  store  notes  and  passwords;  and  store  documents. 

C.  The  Subject  Offenses 

5.  For  the  reasons  detailed  below,  I  believe  that  there  is  probable  cause  to  believe  that 
the  Subject  Premises  and  Subject  Devices  contain  evidence,  fiuits,  and  instrumentalities  of 
violations  of  18  U.S.C.  §§  1005  (false  bank  entiles),  1014  (false  statements  to  a  financial 
institution),  1343  (wire  fraud),  and  1344  (bank  fraud)  (collectively,  the  “Banlc  Fraud  Offenses”), 

^2^UTS-er-§^-301T6(-a)(4)(A)  and— 30109(d)(-l-)(A)(l)- (illegal-campaign  Gonfributions)-(tlae- 

“Campaign  Finance  Offenses”),  and  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other 
Subject  Offenses)  (collectively,  the  “Subject  Offenses”). 

D.  Prior  Applications 

6.  The  FBI  and  the  United  States  Attorney’s  Office  for  the  Southern  District  of  New 
York  (“USAO”)  have  been  investigating  several  courses  of  criminal  conduct  by  Michael  Cohen. 
Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President  Donald 
Trump,  and  who  previously  served  for  over  a  decade  as  an  executive  in  the  Trump  Organization, 
an  international  conglomerate  with  real  estate  and  other  holdings. 

7.  In  connection  with  an  investigation  then  being  conducted  by  the  Office  of  the 
Special  Counsel  (“SCO”),  the  FBI  sought  and  obtained  from  the  Honorable  Beryl  A.  Howell,  Chief 
United  States  District  Judge  for  the  District  of  Columbia,  three  search  warrants  for  emails  and 
other  content  infonnation  associated  with  two  email  accounts  used  by  Cohen,  and  one  search 
warrant  for  stored  content  associated  with  an  iCloud  account  used  by  Cohen.  Specifically: 
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a.  On  or  about  July  1 8, 2017,  the  FBI  sought  and  obtained  a  search  warrant  for 
emails  in  the  account^^^^J^gmail.com  (the  “Cohen  Gmail  Account”)  sent  or  received 
between  January  1, 2016  and  July  18,  2017  (the  “First  Cohen  Gmail  Warranf’)- 

b.  On  or  about  August  8,2017,  the  FBI  sought  and  obtained  a  seai-ch  warrant 

l@gmail.com  (the 


for  content  stored  in  the  iCloud  account  associated  with  Apple  ID 
“Cohen  iCloud  Account”  and  the  “Cohen  iCloud  Waixant”). 

c.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  search 
warrant  for  emails  in  the  Cohen  Gmail  Account  sent  or  received  between  June  1,  2015  and 


-November'13ir20l7  (the  “Second-eohen  GmaiFWaiTant-)r^ - - — - - - 

d.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  search 
warrant  for  emails  in  the  account  “Cohen  MDCPC  Account  )  sent  oi 


received  between  the  opening  of  the  Cohen  MDCPC  Account'^  and  November  13, 20 1 7  (the  First 


Cohen  MDCPC  Warrant”). 

8.  The  SCO  has  since  referred  certain  aspects  of  its  investigation  into  Cohen  to  the 
USAO,  which  is  working  with  the  FBI’s  New  York  Field  Office.  As  part  of  that  referral,  on  or 
about  February  8,  2018,  the  SCO  provided  the  USAO  with  all  non-privileged  emails  and  other 
content  information  obtained  pursuant  to  die  First  Cohen  Gmail  Warrant,  Second  Cohen  Gmail 
Warrant,  and  Cohen  MDCPC  Warrant.  On  or  about  March  7,  20 1 8,  the  SCO  provided  the  USAO 


Based  on  my  I'eview  of  this  wairant  and  the  affidavit  in  support  of  it,  I  know  that  the  warrant  ^d 
not  specify  a  time  period,  but  the  affidavit  indicated  that,  piusuant  to  court  order,  the  service 
pi'ovider  had  provided  non-content  information  for  the  Cohen  MDCPC  Account  that  indicated  that 
the  account  contained  emails  from  the  approximate  period  of  March  2017  through  the  date  of  the 
warrant. 
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with  all  non-privileged  content  obtained  pursuant  to  the  Cohen  iCloud  Warrant.^  A  filter  team 
working  witli  the  SCO  had  previously  reviewed  the  content  produced  pursuant  to  these  wairants 
for  privilege. 

9.  On  or  about  Febi-uary  28,  2018,  the  USAO  sought  and  obtained  search  warrants  for 
emails  in  the  Cohen  Gmail  Account  and  the  Cohen  MDCPC  Account,  among  other  accounts,  sent 
or  received  between  November  14, 2017  and  February  28, 2018  (the  “Third  Cohen  Gmail  Warrant” 
and  the  “Second  Cohen  MDCPC  Wairant”).  The  content  produced  puisuant  to  these  warrants  is 
subject  to  an  ongoing  review  for  privilege  by  an  SDNY  filter  team.^ 

- ^10T*~^The^emails-seareh=^wan-ants  described- above-are  refen-ed-to~collectively-as-the- 

“Cohen  Email  Warrants.” 

11.,  On  or  about  April  7,  2018,  the  USAO  and  FBI  sought  and  obtained  a  warrant  for 
prospective  and  historical  cellphone  location  infomiation  for  Subject  Device-1  and  Subject 
Device-2.  On  or  about  April  8, 2018,  the  USAO  and  FBI  sought  and  obtained  authority  to  employ 
an  electronic  technique,  commonly  known  as  a  “tiiggerfish,”  to  determine  the  location  of  Subject 
Device-1  and  Subject  Device-2, 
n.  Probable  Cause 
A.  Overview 

12.  The  United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  FBI 
are  investigating,  among  other  things,  schemes  by  Target  Subject  Michael  Cohen  (a)  to  defi'aud 
multiple  banks  fi'om  in  or  about  2016  up  to  and  including  the  present,  and  (b)  to  make  an  illegal 

^  The  SCO  had  previously  provided  a  subset  of  this  non-privileged  content  on  or  about  February 
2,  2018. 

^  On  or  about  Februaiy  28, 2018  and  April  7,  2018,  the  USAO  and  FBI  sought  and  obtained  Rule 
41  search  warrants  authorizing  the  search  of  emails  and  content  obtained  pursuant  to  previously 
issued  warrants  for  additional  subject  offenses. 
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campaign  contribution  in  October  2016  to  then-presidential  candidate  Donald  Trump.  As  noted, 
Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President  Donald 
Trump,  and  who  previously  seiwed  for  over  a  decade  as  an  executive  in  the  Trump  Organization, 
an  international  conglomerate  with  real  estate  and  other  holdings. 

1 3 .  The  investigation  has  revealed  that  Cohen  has  made  affirmative  misrepresentations 
in  and  omitted  material  infonnation  from  financial  statements  and  other  disclosures  that  Cohen 
provided  to  multiple  banlcs  m  comrection  with  a  transaction  intended  to  relieve  Cohen  of 
approximately  $22  million  in  debt  he  owed  on  taxi  medallion  loans  from  the  banks.  As  set  forth 

drf  detaiTbelowrimthese-flnaneiaTstatements^and  in-his-oral  and  other  written-statements  to  theses 

banks,  Cohen  appears  to  have  (i)  intentionally  misrepresented  his  ability  to  pay  cash  by  failing  to 
disclose  cash  he  began  receiving  in  2017  from  new  consulting  work;  (ii)  significantly  understated 
his  total  holdings  of  cash  and  cash  equivalents;  (iii)  failed  to  disclose  tens  of  thousands  of  dollars 
he  received  in  monthly  interest  income,  and  (iv)  failed  to  inform  the  banks  fi'om  which  he  was 
seeking  debt  relief  that  he  had  agreed  to  make  a  $3.8  million  cash  payment  to  a  third  party,^H 


acquisition  of  the  taxi  medallions  seeming  Cohen’s 


in  connection  with 


debt.  By  making  these  misrepresentations  and  material  omissions,  Cohen  avoided  maldng 
monthly  payments  on  his  loans,  and  attempted  to  fraudulently  induce  the  banks  to  relieve  hnn  of 
certain  repayment  obligations  and  personal  guarantees  that  Cohen  and  his  wife  had  signed. 

14.  Additionally,  the  investigation  has  revealed  that  shortly  before  the  2016 
presidentiad  election,  Cohen  made  a  payment  of  $130,000  from  a  limited  liability  corporation 
(“LLC”)  to  Stephanie  Clifford,  an  individual  who  is  alleged  to  have  had  an  exframaiital  affair  with 
then-candidate  Trump.  This  payment  was  made  to  Clifford  in  exchange  for  an  agreement  not  to 
make  any  public  disclosures  about  her  alleged  affair  with  Trump.  As  set  forth  below,  there  is 
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probable  cause  to  believe  that  Cohen  made  this  payment  to  Clifford  for  the  purpose  of  influencing 
the  presidential  election,  and  therefore  that  the  payment  was  an  excessive  in-kind  contribution  to 
the  Tmmp  campaign. 

15.  Based  on  my  review  of  emails  obtained  from  the  Cohen  Email  Warrants, 
information  obtained  pursuant  to  the  iCloud  Warrant,  and  documents  pi'oduced  pursuant  to 
subpoenas,  as  well  as  my  review  of  public  sources,  I  have  learned  that  Cohen  has  used  tlie  Subject 
Premises  to  (a)  receive  documents  related  to  the  transaction  intended  to  relieve  Cohen  of  his  taxi 
medallion  debt,  (b)  receive  documents  and/or  conduct  meetings  related  to  his  consulting  work,  (c) 

receive  documents  and/or  conduct-meetings  relating  to  his  finanees-and-assets^some-of-whieh^as- 

noted  above  and  as  detailed  fuither  herein,  he  has  concealed  from  tire  banks  in  connection  with  the 
refinancing  of  his  taxi  medallion  debt,  (d)  receive  and  send  documents  relating  to  his  payment  to 
Clifford,  and  (e)  house  and  operate  electronic  devices  that  were  utilized  in  connection  with,  among 
other  things,  the  taxi  medallion  transaction,  Cohen’ s  consulting  work,  and  his  payment  to  Clifford. 
Specifically,  as  described  below.  Subject  Premises-1  likely  contains  evidence  concerning  Cohen’s 
taxi  medallion  loans,  his  negotiations  with  banks,  his  personal  finances,  his  consulting  work,  his 
tax  returns,  and  his  payment  to  Clifford,  as  well  as  electronic  devices  containing  such  evidence, 
all  of  which  constitute  or  contain  evidence  of  the  Subject  Offenses.  Additionally,  as  described 
below.  Subject  Premises-2  likely  contains  evidence  relating  to  Cohen’s  consulting  work,  his 
finances,  and  his  payment  to  Clifford,  as  well  as  electronic  devices  containing  such  evidence. 
Subject  Premises-3,  as  described  below,  likely  contains  evidence  relating  to  Cohen’s  assets  and 
finances,  including  assets  that  may  not  have  been  disclosed  to  banks  in  coimection  with  the 
refinancing  of  Cohen’s  taxi  medallion  debt  or  documents  relating  to  such  assets,  and  documents 
or  evidence  related  to  Cohen’s  payment  to  Clifford.  Subject  Premises-4  likely  contains  electronic 
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devices,  including  Subject  Device- 1  and  Subject  Device-2,  which  themselves  contain  evidence  of 
the  Subject  Offenses,  including  concerning  Cohen’s  taxi  medallion  loans,  his  negotiations  with 
banks,  his  personal  finances,  his  consulting  work,  his  tax  returns,  and  his  payment  to  Clifford. 
Accordingly,  and  as  set  forth  in  more  detail  below,  there  is  probable  cause  to  believe  that  the 
Subject  Premises  and  Subject  Devices  will  include  evidence  of  the  Subject  Offenses. 

B.  Probable  Cause  Regarding  Subjects’  Commission  of  the  Subject  Offenses’^ 

The  Bank  Fraud  Scheme 
(i)  Cohen ’s  Statements  to  Sterling  National  Bank 
16.  iAs^setJorth  in-detaiLbelow,  in:20 14, Tlohen,  through  LLCs  contTolleclby  him  an4 

his  wife,  Laura  Cohen,  entered  into  a  series  of  loans  fi-om  Sterling  National  Bank  (“Sterling”)  and 
the  Melrose  Credit  Union  (“Melrose”),  secured  by  taxi  medallions,  for  approximately  $20  million. 
Tliough  entered  into  by  LLCs,  the  loans  were  also  secured  by  personal  guarantees  in  the  names  of 
both  Cohen  and  his  wife.  Over  time,  as  the  taxi  industry  weakened  and  the  medallions  lost  value, 
Cohen  sought  to  renegotiate  the  terms  of  those  loans  and/ or  relieve  hunself  fi'om  their  obligations, 
including  the  personal  guarantees.  As  part  of  that  effort,  Cohen  made  a  series  of  representations 
to  Sterling  and  Mebose  about  his  net  worth,  assets,  available  cash  and  income,  among  other  things. 
Specifically,  based  on  my  review  of  records  maintained  by  Sterling  and  Melrose,  and  public 
sources  concerning  the  taxi  industry  and  the  value  of  taxi  medallions,  as  well  as  my  participation 
in  interviews  with  a  Sterling  executive  vice-president  (the  “Sterling  Employee- 1”)  and  two  other 


^  In  the  following  recitation  of  probable  cause,  I  frequently  refer  to  phone  calls  or  text  messages 
involving  Cohen.  The  text  messages  described  herein  as  sent  or  received  by  Cohen  were  all  sent 
or  received  fi'om  the  telephone  numbers  associated  with  Subject  Device-1  or  Subject  Device-2. 
The  vast  majority  of  the  phone  calls  described  herein  made  or  received  by  Cohen  were  made  or 
received  by  the  telephone  numbers  associated  with  Subj ect  Device-1  or  Subj ect  Device-2,  although 
in  certain  limited  instances  Cohen  used  a  landline  or  other  phone. 
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Sterling  employees  (“Sterling  Employee-2”  and  “Sterling  Employee-3”),  I  have  learned,  among 
other  things,  the  following: 

a.  Taxi  medallions  are  small  metal  plaques  affixed  to  taxis.  Without  a  medallion,  it 
is  illegal  to  operate  a  taxi  in  cities  with  medallion  systems,  such  as  New  York  City.  Cohen  and  his 
wife  own  multiple  LLCs  that  collectively  own  32  taxi  medallions  (each  LLC  owns  two 
medallions).®  Cohen’s  purchase  of  these  New  York  taxi  medallions  was  originally  financed  by 
loans  from  Capital  One  bank,  for  which  the  medallions  served  as  collateral.  Cohen  was  not  a  taxi 
operator,  and  leased  his  medallions  to  a  third  party.  That  third  paify  made  monthly  payments  to 

’Cohen,  whciirtonrused  some  oTthose“proceeds  to  make  hisrmonthlydoan  payments-to-Gapital— 

One. 

b.  In  early  2014,  Cohen  became  a  customer  of  Sterling  when  he  sought  to  refinance  a 
mortgage  on  a  rental  property  that  he  owned.  In  or  around  April  2014,  Cohen  raised  with  Sterling 
the  prospect  of  refinancing  his  taxi  medallion  loans,  which  were  then  at  Capital  One.  By  in  or  about 
September  2014,  Cohen  began  negotiating  a  lending  transaction  with  Sterling  that  would  allow 
Cohen  to  pay  off  his  loans  at  Capital  One  and  boiTow  more  money  from  the  then-increase  in  value 
of  the  medallions.  According  to  Sterling  Employee-1,  in  2014,  prior  to  the  recent  upheaval  in  the 
taxi  industry— as  a  result  of  the  emergence  of  ride-sharing  services,  such  as  Uber— taxi  medallion 
loans  were  viewed  by  banks  and  investors  as  safe,  short  term  credits,  as  the  market  value  of  taxi 
medallions  was  consistently  rising.  Consequently,  taxi  medallion  loans — like  the  loans  held  by 
Cohen — were  frequently  refinanced  at  increasing  amounts  as  the  value  of  the  medallions  rose. 
According  to  Sterling  Employee-1,  borrowers  typically  cashed  out  the  increase  in  the  loan  amount 


®  One  of  these  companies.  Mad  Dog  Cab  Corp.,  was  jointly  owned  by  Sondra  Cohen,  who  I 
believe  is  Cohen’s  mother. 
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and  used  the  additional  funds  for  other  purposes.  Cohen  appears  to  have  followed  this  approach  in 
2014,  when  he  agreed  to  refinance  his  medallion  loans  for  approximately  $22  million,  which — 
according  to  letters  from  Capital  One  in  Sterling’s  files— was  greater  than  his  previous  debt  at 
Capital  One  Bank  ($21  million,  of  which  $14.6  million  was  a  line  of  credit  to  Cohen).  This  allowed 
Cohen  to  cash  out  die  proceeds  from  the  transaction. 

c.  Based  on  my  review  of  records  maintained  by  Sterling,  I  have  learned  that  on  or 
about  December  8, 2014,  each  of  Cohen’s  sixteen  taxi  medallion  LLCs  entered  into  loan  agreements 
and  promissory  notes  with  Sterling  for  the  principal  sum  of  $1,375,000,  with  repayment  due  on 

December  87^016— Eaehdoamwas  signed  by-Michael  onLaura  Cohenrdepending  on  who  wasThe- 

sole  shareholder  of  the  LLC.  The  address  listed  for  each  of  the  LLCs  was  the  address  for  Subject 
Premises-1 .  The  loans  were  also  each  secured  by  a  security  agreement,  dated  the  same  day,  making 
the  medallions  collateral  for  the  notes.  To  give  Sterling  additional  security,  Michael  and  Laura 
Cohen  signed  personal  guarantees  and  confessions  of  Judgment,  giving  Sterling  the  right  to  pursue 
collection  against  the  Cohens’  personal  assets  were  their  coi-porations  to  default  under  the  loan 
agreements.  The  personal  guaranty  agi'eements  stated  that  the  LLCs  had  offices  at  the  address  for 
Subject  Premises-1,  and  contained  a  notice  provision  that  stated  that  any  notices  required  by  the 
agreements  should  be  mailed  to  Subj  ect  Premises- 1 .  In  total,  Sterling  agreed  to  lend  approximately 
$22  million  to  the  Cohens’  companies. 

d.  Pursuant  to  participation  agreements.  Sterling  transferred  45  percent  of  Cohen’s 
taxi  medallion  debt  to  Melrose.® 


®  Melrose,  which  had  a  business  principally  focused  on  taxi  medallion  loans,  is  now  in 
conservatorship  by  the  National  Credit  Union  Administration  (  NCUA  ). 
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e.  In  evaluating  Cohen’s  requested  refinancing  of  the  taxi  medallions,  Sterling  (and 
Melrose,  consistent  with  its  participation  in  the  deal)  conducted  due  diligence.  At  Sterling’s 
request,  Cohen  provided  Sterling  with  a  statement  of  financial  condition,  dated  August  1,  2014 
(the  “August  2014  Financial  Statement”),  which  indicated  that  Cohen  had  $100,740,000  in  total 
assets,  $23,550,000  in  total  liabilities,  and  a  net  worth  of  $77,190,000.1®  From  my  review  of  a 
Sterling  credit  memorandum,  dated  September  29,  2014,  I  know  tliat  Sterling  viewed  the 
transaction  favorably  because,  accounting  for  loan  payments,  cash  flows  from  the  medallions  were 
projected  to  be  positive,  the  value  of  the  collateral  (as  esthnated  by  Sterling)  exceeded  $42  million, 
-and  the-net-worth  of  Cohen— who-was-the-direct-obligor  under-the  guarantee  agreements==was- 

over  $77  million.  An  internal  Sterling  credit  and  risk  rating  analysis  report,  dated  October  20, 
2014,  recommended  approval  of  the  loans  for  substantially  the  same  reasons. 

f.  Based  on  my  review  of  records  maintained  by  Sterling  and  public  sources,  I  have 
learned  that  over  time,  the  collateral  bacldng  Cohen’s  loans  (taxi  medallions)  lessened  in  value  due 
to  the  rise  in  ride-sharing  companies.  Additionally,  Cohen  began  falling  behind  on  loan  payments 
to  Sterling  and  Melrose.  I  loiow  from  records  maintained  by  Sterling  and  an  inteiwiew  with  Sterling 
Employee-2  that,  beginning  in  or  around  September  2015,  Cohen  told  Sterling,  in  sum  and 
substance,  that  the  individual  leasing  Cohen’s  medallions  had  fallen  behind  in  making  payments  to 
Cohen,  and  that  as  a  result,  the  monthly  cash  flow  from  his  taxi  medallions  had  been  reduced, 
leaving  him  with  a  shortfall  of  approximately  $16,000  each  month.  For  instance,  I  have  reviewed 
an  email  from  Sterling  Employee-2,  dated  September  9,  2015,  summarizing  a  call  with  Cohen 
which  according  to  the  email  and  toll  records  for  Cohen’s  cellphone  occun-ed  on  September  8, 

Cohen  subsequently  provided  Sterling  with  a  revised  statement  of  financial  condition,  also 
dated  August  1, 2014,  which  reported  assets  of  $99,420,000,  total  liabilities  of  $23,550,000,  and  a 
net  worth  of  $75,870,000. 
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2015 — during  which  Cohen  told  Sterling  Employee-2,  in  sum  and  substance,  about  his  cash  flow 
problems  and  a  monthly  shortfall  of  approximately  $16,000.  In  tliat  same  email,  Sterlmg 
Employee-2  commented  that  despite  Cohen’s  statements,  his  personal  financial  information 
“indicate[d]  a  strong  ability  to  make  up  the  difference  in  payments.”  Cohen,  however,  according 
to  Sterling  Employee-2,  pushed  the  bank  for  a  reduction  in  Cohen’s  mondily  payments. 

g.  From  my  review  of  records  maintained  by  Sterling  and  my  participation  in  an 
mterview  with  Sterling  Employee-2, 1  have  learned  that  Cohen  and  Sterling  Employee-2  spoke 
again  on  September  28,  2015,  and  that  during  the  call  Cohen  stated,  in  sum  and  substance,  that  the 

-individual-to  whom  Cohendeases  the  medallions  had  again  reduced  monthly  payments  to  Cohen  JL 

know  from  my  review  of  records  maintained  by  Sterling  that  between  in  or  about  September  2015 
and  November  2015,  Sterling  raised  the  possibility — ^both  internally  and  with  Cohen — of  Cohen 
posting  his  real  estate  holdings,  personal  residence,  or  some  other  collateral  as  additional  security 
for  the  banks.''  According  to  these  records,  however,  Cohen  resisted  these  requests.  From  my 
review  of  loan  documents  and  records  maintained  by  Sterling,  I  know  that  in  or  about  November 
2015,  as  a  result  of  Cohen’s  representation  that  he  was  not  earning  sufficient  returns  on  his 
medallions  to  cover  monthly  interest  payments.  Sterling  and  Melrose  agreed  to  amend  their  loans 
with  Cohen  by,  among  other  things,  reducing  the  interest  rate  Cohen  paid  to  Mefrose  and  extending 
the  loan  matuiity  date  to  December  8, 2017. 

h.  I  know  from  interviews  with  Sterling  Employee- 1  and  Sterling  Employee-2,  as  well 
as  emails  I  have  reviewed,  that  in  or  about  October  2016,  Cohen  told  Sterling  Employee- 1  that 
Cohen  had  a  potential  buyer  of  his  taxi  medallions,  named^^^^^^^^|.  who  would  agree  to 

"  Based  on  my  review  of  pi'opeity  records,  I  know  that  on  or  about  October  28,  2015,  around 
the  time  period  when  Sterling  raised  the  possibility  of  Cohen  posting  his  personal  residence— 
Subject  Premises-1 — ^as  collateral,  Cohen  transferred  Subject  Premises-1  into  a  trust. 
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assume  Cohen’s  debt  with  Sterling  and  Mehose.  Based  on  ray  review  of  records  maintained  by 
Sterling,  as  well  as  the  interviews  with  Sterlmg  Employee- 1  and  Sterling  Employee-2  referenced 
above,  I  Icnow  that  by  or  before  October  20 1 6,  Cohen  had  entered  into  negotiations  to  sell  his  sixteen 
coiporate  to 

for  the  balance  of  the  loans,  which  at  the  time  was  $21,376,000.  I  know  from  my  review  of  records 


maintained  by  Sterling,  and  my  participation  in  an  interview  with  Sterling  Employee-2,  that  as  a 
condition  of  tlie  transfer  of  the  medallion  loans — and  because  SterUng  was  unfamiliar  with 
^^^^^H-Sterling  requested  that  Cohen  make  a  substantial  principal  payment  on  the  loan,  of 

-approximately  one  million  dollarsrprioi'-to  the  transfer— Cohen  rejected  this  request-initially^But- 


on  or  about  January  3 1 , 20 1 7,  Cohen  told  Sterling  Employee- 1 ,  in  sum  and  substance,  that  he  would 
make  a  one  million  dollar  principal  reduction  payment  in  order  to  move  forward  with  the  medallion 
transfer  deal  with^^^^^^^^^|  Indeed,  in  an  email  sent  by  Cohen  to  Sterling  Employee-2  on  oi 
about  February  22,  2017,  Cohen  confirmed  that  he  “agreed  to  pay  down  1  million  from  the  loan 
amount.” 


i.  Pursuant  to  the  participation  agreements  between  Sterling  and  Melrose,  Sterling 
was  required  to  secure  Melrose’s  agreement  to  participate  in  the  transfer  of  the  taxi  medallion  debt 
fr-om  Cohen  to|^^^^^^m  On  or  about  April  17,  2017,  Sterling  sent  a  memorandum  to 
Melrose  summarizing  the  terms  of  the  proposed  transaction,  and  noting  the  requirement  that 
Melrose  agree  to  the  terms.  On  or  about  May  2, 2017,  Sterling  Employee-1  told^^^^^^^l 
that  Melrose  had  agreed  to  the  deal  in  principle,  and  that  Sterling  would  be  sending  the  parties  a 
teim  sheet  shortly. 

j.  In  order  for  the  banlcs  to  conduct  diligence  and  evaluate  the  proposed  transaction 
fully,  they  requested  financial  information  firom  the  parties.  On  or  about  June  7,  2017,  Sterling 
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Employee-1  emailed  Cohen  to  request  an  “updated  personal  financial  statement,”  completed 
jointly  with  Cohen’s  wife,  and  Cohen’s  most  recent  federal  income  tax  return.  On  or  about  June 
8, 2017,  Cohen  emailed  Sterling  Employee-1  a  Sterling  personal  financial  statement  form  that  had 
been  filled  out  by  hand,  which  referenced  a  statement  of  financial  condition,  dated  May  1,  2017 
(the  “May  2017  Fmancial  Statement”)  that  was  also  attached.  The  May  2017  Financial  Statement 
included  a  cover  letter  from  Cohen’s  accountant,  Jeffrey  Getzel,  stating,  in  sum  and  substance,  that 
the  mfonnation  in  the  statement  came  from  Cohen  and  that  Getzel  had  not  confirmed  its  accuracy 
or  completeness.  The  May  2017  Financial  Statement  stated  that  Cohen  had  total  assets  of 

-$4T,955,000rtotaHiabilities  of  $39rl30,000;-and-a  net  worth"of-$2782fr5000.  The-May-20T7- 

Fmancial  Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in  cash, 
$26,155,000  m  closely  held  companies  (such  as  the  taxi  medallion  entities  and  his  real  estate 
holdings),  $3,200,000  in  real  estate  investments,  and  his  $1 1,000,000  personal  residence.^^ 

k.  Based  on  my  review  of  reports  of  law  enforcement  interviews  of  Sterling 
Employee-1, 1  have  learned  that  Sterling  Employee-1  reviewed  the  May  2017  Financial  Statement 
with  Cohen  to,  among  other  things,  verify  its  accuracy,  and  Sterling  Employee-1  asked  Cohen  about 
specific  line  items  on  the  financial  statement,  including  the  cash  amount,  value  of  medallions,  and 
total  liabilities.  Cohen  stated  to  Sterling  Employee-1,  in  sum  and  substance,  that  the  May  2017 
Financial  Statement  was  accurate. 

l.  On  or  about  August  16,  2017,  Sterling  Employee- 1  emailed  Cohen 
^^^^^^|.ttaching  a  non-binding  term  sheet  memorializing  the  potential  transaction  between 


Based  on  my  review  of  Cohen’s  financial  statements,  I  know  that  the  precipitous  decline  in 
assets  fi'om  his  2014  financial  statement  to  his  2017  financial  statements  can  be  explained 
primarily  by  reported  depreciation  in  the  value  of  Cohen’s  real  estate  assets  and  medallion 
investments. 
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Sterling,  Melrose,  Cohen,  Tlie  term  sheet  included  a  cover  letter  addressed 

to  Cohen  at  Subject  Premises-1.  The  parties  negotiated  the  provisions  of  the  term  sheet  and,  on  or 
about  September  5,  2017,  Sterling  Employee- 1  sent  Cohen  a  copy  of  the 

executed  term  sheet.  According  to  the  term  sheet, borrow  $20,000,000 
from  Sterling  and  Mefrose,  to  be  secured  by  the  medallions  that^^^^^^^^^was  to  acquire  from 
Cohen. 

m.  As  part  of  the  agi-eement,  according  to  tire  teim  sheet,  $1,265,913  in  principal  (which 
is  what  would  remain  after  the  $20,000,000  payment  on  the  outstanding  loan  balance)  would  be 

-repaid-by-Gohen  and-the  two-banfcsrwitli  Cohen  paying- fifty-percent  and  the-banlcs  dividing  . the- 

remaining  half  of  the  balance.  Based  on  my  review  of  an  internal.  Sterling  credit  memorandum, 
dated  October  4, 2017,  the  parties  reached  apreliminary  agi'eement  that  Cohen  would  pay  $632,956 
of  the  remaining  $1,265,912  principal  loan  balance,  and  Sterling  and  Mefrose  would  absorb 
$357,167  and  $275,789,  respectively,  in  the  form  of  chai-ge-offs.  According  to  Sterling  Employee- 
1,  Sterling  was  willing  to  divide  the  repayment  of  the  outstanding  principal  balance — despite  its 
prior  insistence  that  Cohen  make  a  principal  pay-down  of  at  least  one  million  dollars  ^because 
Cohen  represented  on  a  telephone  call  with  Sterling  Employee- 1,  in  sum  and  substance,  that  he  had 
insufficient  liquidity  to  pay  the  full  outstanding  principal  balance.  As  pait  of  the  agreement.  Sterling 
and  Mefrose  also  agi'eed  to  relieve  Cohen  and  his  wife  of  the  personal  guai'antees  that  they  made 
on  behalf  of  the  LLCs.  Thus,  after  completing  the  ^^^^|transaction,  Cohen  would  no  longer 
have  had  any  outstanding  obligations  to  Sterling  or  Mefrose. 

n.  Based  on  my  review  of  emails  sent  by  Sterling  employees,  I  have  learned  that 
because  the  transaction  between  the  parties  was  subject  to  full  credit  underwriting  by  Sterling  and 
Mefrose  (as  well  as  Mefrose’s  regulators  at  NCUA),  in  August  and  September  2017,  Sterling 
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required  and  requested  additional  financial  statements  and  tax  returns  for  Cohen  and 
for  its  credit  underwriting  process.  In  response  to  Sterling’s  requests,  on  or  about  September  25, 
2017,  Cohen  emailed  Sterling  Employee-2  a  copy  of  his  2016  tax  return.  The  tax  return  listed 
Cohen’s  mailing  address  as  Subject  Premises-1 .  Additionally,  on  or  about  October  5, 2017,  Cohen 
re-sent  Sterling  Employee-2  a  copy  of  his  May  2017  Financial  Statement.  A  day  later,  on  October 
6,  2017,  Cohen  emailed  Sterling  Employee-2  a  statement  of  financial  condition,  dated  September 
30,  2017  (die  “September  2017  Financial  Statement”). 

o.  Like  the  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 

“included  a  eover-letter-from  Jeffl'ey  Cetzelj-Cohen^  accountanCstating,  in  sum  and  substance^that- 

the  information  in  the  statement  came  from  Cohen,  and  that  Getzel  had  not  confirmed  its  accuracy 
or  completeness.  The  September  2017  Financial  Statement  stated  that  Cohen  had  total  assets  of 
$33,430,000,  total  liabilities  of  $45,630,000,  and  a  negative  net  worth  of  $12,200,000.^^  Notably, 
unlike  Cohen’s  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
represented  to  Sterling  that  Cohen  had  a  negative  net  worth.  The  September  2017  Financial 
Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in  cash,  $17,630,000  in 
closely  held  companies  (including  the  taxi  medallion  entities  and  his  real  estate  holdings), 
$3,200,000  in  real  estate  investments,  and  his  $1 1,000,000  personal  residence  (which,  for  die  first 


Based  on  my  review  of  Cohen’s  financial  statements,  I  Icnow  that  this  further  decline  in 
assets  can  be  explained  primarily  by  reported  depreciation  in  the  value  of  Cohen’s  real  estate  assets 
and  medallion  investments. 

Notably,  the  September  2017  Financial  Statement  valued  each  of  Cohen’s  thiity-two  New 
York  taxi  medallions  at  approximately  $180,187.50,  whi^v^^^siderably  less  than  the 
$650,000  valuation  ascribed  to  each  medallion  in  the  Cohen-^^^^Hterm  sheet. 
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time,  he  indicated  was  held  by  a  trust). The  September  2017  Financial  Statement  included  assets 
and  liabilities  not  held  in  Cohen’s  name,  such  as  various  entities  associated  with  his  taxi  medallions 
and  some  of  his  real  estate  investment  entities. 

p.  From  my  participation  in  an  interview  with  Sterling  Employee-2,  arid  my  review  of 
records  maintained  by  Sterling,  I  have  also  learned  that  around  the  time  Cohen  provided  Sterling 
with  these  financial  statements — i.e.,  in  or  around  September  2017- — Cohen  stopped  paying 
mondily  loan  payments  on  his  taxi  medallion  loans  altogether.  According  to  Sterling  Employee- 
2,  Cohen  informed  Sterling,  in  sum  and  substance,  that  he  had  insufficient  fiinds  to  pay  the  monthly 

-prineipal  and-interest  payments-omhis  medallion-loans^  By-in-or  about  DeGember-2017T^  Sterling- 

and  Melrose  had  not  been  paid  approximately  $276,937.92  in  monthly  principal  and  interest 
payments  on  the  medallion  loans.  Based  on  Cohen’s  financial  condition  as  conveyed  in  the 
September  2017  Financial  Statement,  and  his  delinquency  in  making  payments  to  Sterling,  among 
other  things,  the  bank’s  credit  underwriting  committee  deteimined  (and  memorialized  in  a 
December  2017  memorandum)  that  the  Cohei]^^^^^|ransaction  was  favorable  for  the  bank 
-  that  is,  that  ^^^^^^ivould  be  a  better  borrower  than  Cohen. 

q.  On  or  about  December  26,  2017,  Sterling  sent  Cohen  a  demand  letter  requesting 
the  immediate  receipt  of  past-due  loan  payments.  The  demand  letter  was  addi'essed  to  Cohen  at 
Subject  Premises-1.  On  December  29,  2017,  Sterling  sent  Cohen  a  letter  stating  that  he  was  in 
default  rmder  the  loans  between  Sterling  and  Cohen’s  medallion  corporations.  The  notice  of 
default  was  addressed  to  Cohen  at  Subject  Premises-1 .  Cohen  did  not  make  an  immediate  payment 
on  the  loans,  but  instead  sent  an  e-mail  to  Sterling  Employee- 1  on  or  about  January  24,  2018, 

Based  on  my  review  of  property  records  maintained  by  the  City  of  New  York,  and  my 
participation  in  an  interview  with  Getzel,  I  know  that  in  2015,  Cohen  transferred  his  residence  to 
a  trust.  He  did  not  disclose  that  transaction  to  Getzel  or  Sterling  nntil  in  or  about  September  2017. 
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stating  that  during  the  closing  of  the  Cohen-^^^^^^|ransaction,  Cohen  would  “bring  all 
payments  up  to  date  as  well  as  deposit  the  payoff  differential.”  Cohen  also  requested  by  email  on 
Januaiy  24, 201 8,  that  at  the  closing  of  the  Cohen^^^H.  transaction,  Sterling  provide  a  letter 
stating  that  all  of  Cohen’s  debts  have  been  satisfied  and  that  Cohen’s  personal  guarantees  of  the 
medallion  loans  had  been  terminated. 

r.  The  Cohen^^^^^|ti-ansaction,  however,  did  not  close.  On  or  about  January 

29,  2018,  attorney  emailed  attorneys  for  Sterling  and  stated  that  “at  this  time 

there  is  no  deal  with  Michael  Cohen.  Some  of  the  numbers  have  changed  and  M'e  are  not  prepared 

-to  go  forwardT^^" — - - - - = — — ^ - - - 

s.  Based  on  my  participation  in  the  interview  with  Sterling  Employee-2  and  my 
review  of  records  maintained  by  Sterling,  I  know  that  after  the  Cohen-^^^^^^^|deal  fell  apart. 
Sterling '  assigned  Cohen’s  loans  to  Sterling  Employee-3,  who  specializes  in  collecting  on 
defaulting  loans.  From  my  participation  in  an  interview  with  Sterling  Employee-3,  my  review  of 
telephone  call  notes  talcen  by  Sterling  Employee-3,  and  my  review  of  telephone  records,  I  know 
that  Sterling  Employee-3  spoke  several  times  to  Cohen  on  or  about  January  30, 2018  about  paying 
down  and/or  restructuring  Cohen’s  outstanding  taxi  medallion  loans.  On  the  calls,  which  in  total 
lasted  more  than  an  hour,  Cohen  stated  in  sum  and  substance  that  he  did  not  have  more  than 
$1,250,000  to  pay  toward  the  medallion  loans.  On  the  call,  in  the  com'se  of  reviewing  the  failed 
Cohen-jUmi  ti-ansaction.  Sterling  Ernployee-3  questioned  Cohen  about  the  price 

was  to  have  paid  for  each  medallion,  and  whether  there  was  a  side  agreement  between 
Cohen  and  Cohen  denied  that  there  was  any  side  agi'eement  with^^^^^| 

t.  On  or  about  January  31,  2018,  Cohen  emailed  Sterling  Employee-3  and  proposed 
paying  $500,000  to  bring  the  loans  current  and  $750,000  to  bring  the  principal  balance  to 
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$20,500,000.  Cohen  also  suggested  revised  monthly  interest  payment  amounts.  The  signature  ^ 

block  on  the  email  indicated  that  Cohen’s  address  was  the  address  for  Subject  Pi-emises-2.  On  or  I 

about  January  31,  2018,  Sterling  Employee-3  responded  to  Cohen  and  stated,  in  sum  and  j 

substance,  that  Cohen  would  need  to  pay  the  entirety  of  the  overdue  payments  and  pay  down  the 

principal  balance  of  the  loan  to  $20,000,000  (in  total,  a  payment  of  approximately  $1,750,000),  1 

I 

and  would  need  to  make  larger  monthly  interest  payments.  ^ 

u.  On  or  about  February  1,  2018,  Cohen  emailed  Sterling  Employee-3  and  proposed 
“[pjayment  of  $1.250m  which  ALL  can  be  used  to  pay  down  principal,  if  [Sterling]  will  waive  ^ 

-past-due-amountsT^but-stated-^Ldo  NOT  have-more-than  the  $L2-50mA^(Emphasis  in  GriginaL)— - - [ 

I 

Cohen  also  stated,  in  sum  and  substance,  that  he  had  insufficient  financial  resources  to  post  ^ 

I 

jl 

additional  collateral  or  pre-fund  monthly  payments.  The  signature  block  on  the  email  indicated  | 

that  Cohen’s  addr'ess  was  the  addr-ess  for  Subject  Premises-2.  Based  on  my  participation  in  an 

interview  with  Sterling  Employee-3,  I  have  learned  that  since  January  30,  2018,  Sterling  has 

continued  to  renegotiate  the  medallion  loans  with  Cohen  based  on  Cohen’s  representations  about 

his  current  financial  position.  In  particular-,  according  to  Sterling  Employee-3,  Cohen  and  Sterling 

have  an  agr-eement  in  principal  to  restructm'e  Cohen’s  loans  based  in  part  of  Cohen’s  agreement  to 

make  a  principal  payment  of  approximately  $750,000,  to  make  a  payment  of  $500,000  to  become 

current  on  interest  pa)unents,  and  to  post  $192,000  in  cash  collateral  for  his  firture  monthly 

payments  on  the  loan.  Cohen  also  agreed  to  pledge  an  interest  he  had  in  a  property.  Sterling 

Employee-3  has  stated  that  had  Cohen  indicated  he  had  more  than  $1,250,000  available  to  him, 

Stirling  would  have,  among  other  things,  negotiated  for  a  lar-ger  reduction  to  the  principal  amount 
of  the  loan. 
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(ii)  Cohen  Made  Material  Misrepresentations  About  His  Finances  to  Banks 

Cohen  Concealed  fi'om  Stei'ling  and  Melrose  Cash  Derived  from  Consulting  Work 

17.  As  set  forth  in  detail  below,  despite  multiple  written  and  oral  representations  by 
Cohen  to  Sterling  (and,  by  extension,  Mekose^^)  that  he  had  insufficient  funds  to  pay  dowm  the 
principal  balance  of  the  medallion  loans,  malce  monthly  interest  payments,  or  pay  past-due 
amounts,  it  appears  that  between  2016  and  the  present,  Cohen  opened  and  maintained  bank 
accounts  at  First  Republic  Bank  (“Fkst  Republic”),  and  then  received  millions  of  dollars  in 
consulting  payments  in  these  accounts,  which  he  did  not  disclose  to  Sterling.  Cohen  set  up  these 

-accounts  andrecerv:ed^these,funds_durmg_thewery  period  injhich  he  made  disclosures  to  Sterlings 

about  his  personal  finances  (including  his  assets  and  liabilities)  and  his  ability  to  make  payments 
on  the  medallion  loans.  In  these  disclosures  to  Sterling — and  despite  being  asked  about  these  bank 
accounts  by  his  accountant — Cohen  misled  the  banlc  by  claiming  he  had  insufficient  liquidity  to 
satisfy  his  obligations  or  meet  the  bank’s  demands,  while  withholding  information  about  these 
ongoing  revenue  streams  and  liquid  financial  assets  at  Fkst  Republic. 

18.  Specifically,  based  on  my  review  of  documents  and  bank  records  produced 
pursuant  to  a  subpoena  by  Fkst  Republic,  and  my  participation  in  and  review  of  reports  of 
interviews  with  a  Fkst  Republic  sales  manager  (“First  Republic  Employee-1”)  and  a  Fkst  Republic 
senior  managing  dkector  (“Fkst  Republic  Employee-2”),  I  have  learned,  among  other  things,  the 
following: 


Based  on  my  review  of  a  report  of  an  interview  conducted  with  an  employee  of  Mekose,  I 
have  learned  that,  pursuant  to  the  participation  agreement  between  Sterling  and  Mekose,  Cohen’s 
financial  statements  and  other  records  in  Sterling’s  possession  were  forwarded  to  Meh^s^^ffi^ 
Mekose  could  make  a  determination  as  to  whether  to  approve  of  the  Cohen-^^^^^^ 
transaction.  Based  on  my  review  of  reports  of  interviews  wifi^ehns^rnployees,  1  also  know 
that  Cohen  called  employees  at  Mekose  regar-ding  the  Coheii^^^^^^Bransaction. 
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a.  Cohen  and  his  wife  have  been  customers  of  Fhst  Republic  since  approxunately 
June  2011.  Cohen  controls  several  checking  and  loan  accounts  at  First  Republic,  some  in  his  own 
name  and  others  in  the  names  of  corporate  entities.  According  to  First  Republic’s  Icnow-your- 
customer  records  on  Cohen, his  prrmai'y  physical  address  is  the  address  for  Subject  Piemises-1. 

b.  On  or  about  October  26,  2016,  in  Manliattan,  New  York,  Cohen  opened  a  new 
checking  account  at  First  Republic  in  the  name  of  Essential  Consultants  LLC  (the  Essential 
Consultants  Account”).  Cohen  was  the  only  authorized  signatory  on  the  account.  According  to 
account  opening  documents,  the  primary  address  for  Essential  Consultants  LLC  was  the  address 

for  Subject  Pi'emises-lT~When  Cohen  opened^he^iSsential  Consultants-Aecountj-First  Republic- 

Employee- 1  conducted  an  in-person  interview  of  Cohen.  In  response  to  a  series  of  loiow-your- 
customer  questions  about  the  purpose  of  the  account — ^the  answers  to  which  First  Republic 
Employee-1  entered  into  a  form^® — Cohen  stated,  in  sum  and  substance,  that  he  was  opening 
Essential  Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting 
work,  and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States. 
Cohen  also  stated,  in  sum  and  substance,  that  his  purpose  in  setting  up  the  account  was  to  keep  the 
revenue  from  his  consulting  business — which  he  said  was  not  his  main  source  of  income  separate 
fi-om  his  personal  finances.  As  set  forth  below,  there  is  probable  cause  to  believe  that  Cohen’s 
statements  about  the  intended  purpose  of  the  account  and  source  of  funds  for  the  account  were 
false.  Specifically,  as  described  below,  the  account  was  not  intended  to  receive — ^and  does  not 


Certain  financial  mstitutions  are  requfred  to  conduct  such  procedmres  pursuant  to  the  Bank 
Secrecy  Act  and  its  implementing  regulations.  See  31  U.S.C.  §  5318;  31  C.F.R.  §  1020.220. 

First  Republic  Employee-1  fust  filled  out  the  form  on  the  day  he  interviewed  Cohen,  October 
26,  2016.  On  or  about  December  19,  2016,  at  the  request  of  bank  compliance  personnel.  First 
Republic  Employee-1  updated  the  form  to  add  more  detail  about  Cohen’s  statements. 
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appear  to  have  received — ^money  in  connection  with  real  estate  consulting  work;  in  addition,  the 
account  has  received  substantial  payments  from  foreign  sources. 

c.  I  know  from  my  review  of  First  Republic  banlc  records  that  were  scheduled  by  an 
FBI  forensic  accountant  that  after  Cohen  opened  the  Essential  Consultants  Account,  Cohen 
received  payments  into  that  account  from  foreign  businesses  and  entities  that  do  not  reflect  the 
stated  client  profile  for  the  residential  and  commercial  real-estate  consulting  services.  Specifically, 
from  my  review  of  the  Essential  Consultants  Account  schedule  and  public  sources,  I  know  the 
following: 

_ _ _ ^4^Beginning-on-oi-aboutJanuary  31,=20J-7,  Cohen  begann-eceLving_monthly_- 

payments  of  $83,333  into  the  Essential  Consultants  Account  from  an  entity  called  Columbus  Nova 
EEC.  According  to  public  somnes,  Columbus  Nova  is  an  investment  management  firm  controlled 
by  Renova  Group,  an  industrial  holding  company  based  in  Zurich,  Switzerland  that  is  controlled 
by  Russian  national  Viktor  Vekselberg.  From  January  2017  to  August  2017,  the  Essential 
Consultants  Account  received  seven  payments  totaling  $583,332.98  from  Columbus  Nova  EEC. 

ii.  Beginning  on  or  about  April  5,  2017,  the  Essential  Consultants  Account 
began  receiving  payments  from  Novartis  Investments,  SARE,  which  I  believe  to  be  the  in-house 
financial  subsidiary  of  the  Swiss  phaimaceutical  company  Novartis  International  AG  (“Novartis”). 
Between  April  2017  and  February  2018,  the  Essential  Consultants  Account  received  eleven  wire 
payments  from  a  Swiss  banlc  account  held  in  the  name  of  Novartis,  each  in  the  amount  of  $99,980, 
for  a  total  of  $1,099,780. 

iii.  Beginning  in  or  about  April  2017,  the  Essential  Consultants  Account  started 
receiving  wire  payments  from  a  bank  account  associated  with  the  telecommunications  company 
AT&T  Inc.  (“AT&r’).  Specifically,  on  or  about  April  14,  2017,  AT&T  sent  $100,000  to  the 
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Essential  Consultants  Account  and,  from  in  or  about  June  2017  to  in  or  about  January  2018,  the 
Essential  Consultants  Account  received  ten  $50,000  payments  fi'om  AT&T.  In  total,  AT&T,  sent 
$600,000  to  the  Essential  Consultants  Account. 

iv.  On  or  about  May  10,  2017,  June  9,  2017,  July  10,  2017,  and  November  27, 
2017,  the  Essential  Consultants  Account  received  four  deposits  in  the  amount  $150,000  (totaling 
$600,000)  fi-om  a  bank  account  in  South  Korea.  The  account  holder  from  which  the  money  was 
sent  is  Korea  Aerospace  Industries  Ltd.  (“KAI”).  KAI  is  a  South  Korea-based  company  that 
produces  and  sells  fixed-wing  aircraft,  helicopter  aircraft,  and  satellites  to  the  United  States 

Jlepartment  of  Defense,  among  other  customers  .^ _ - - 

V.  On  or  about  May  22,  2017,  the  Essential  Consultants  Account  received  a 
$150,000  deposit  from  an  account  at  Kazkommertsbanlc,  a  Kazakhstani  bank.  The  listed  account 
holder  at  Kazkommertsbanlc  was  a  second  Kazaldistani  bank  named  BTA  Bank,  AO.  A  message 
accompanying  the  wire  payment  indicated  that  the  payment  was  a  “monthly  consulting  fee  as  per 
Inv  BTA-101  DD  May  10,  2017  consulting  agreement  W/N  DD  08  05  2017  CNTR  W/NDD 
08/05/2017.” 

vi.  In  total,  from  on  or  about  January  3 1, 2017  to  on  or  about  Febniary  1, 2018, 
the  Essential  Consultants  Account  received  approximately  $3,033,112.98  in  transfers  and  checks 
from  the  aforementioned  entities.  As  of  on  or  about  January  1 0,  20 1 8,  the  balance  in  the  Essential 
Consultants  Account  was  $1,369,474.23.  Cohen’s  withdrawals  from  the  Essential  Consultants 
account  reveal  tliat  it  was  used  for  largely  personal  purposes,  includmg  to  pay,  among  other  things, 
American  Express  bills  and  fees  from  “the  Core  Club,”  a  private  social  club  in  New  York. 

d.  On  or  about  April  4,  2017,  Cohen  opened  another  new  checking  account  at  First 
Republic,  this  one  in  the  name  of  Michael  D.  Cohen  &  Associates,  P.C.  (the  “MDC&A  Account”). 
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Cohen  was  the  only  authorized  signatory  on  the  account.  According  to  account  opening 
documents,  the  primary  address  for  MDC&A  Account  was  the  address  for  Subject  Premises- 1. 
Among  other  thmgs,  the  MDC&A  Account  received  ten  wire  transfers  and  one  check  from  an 
account  in  the  name  of  Squire  Patton  Boggs,  a  law  firm.  As  noted  above,  Subject  Premises-2  is 
located  inside  the  New  York  office  of  Squire  Patton  Boggs.  In  total,  from  on  or  about  April  5, 
2017,  to  on  or  about  January  2, 2018,  the  MDC&A  Account  received  $426,097.70  in  deposits,  and 
the  balance  in  the  account  as  of  January  2,  2018,  was  $344,541.35.  As  discussed  below,  Cohen 
never  disclosed  any  of  the  balance  in  the  Essential  Consultants  or  MDC&A  accounts  to  Sterling 


during-the~negotiations  -with=^respeet  to-the  I 


lansaction  or^the  subsequent-loan¬ 


refinancing  negotiations,  including  in  his  May  2017  Financial  Statement  and  September  2017 


Financial  Statement. 

19.  Based  on  my  review  of  emails  that  were  seized  pursuant  to  the  Cohen  Email 
WaiTants,  and  my  review  of  reports  of  interviews  witli  employees  of  AT&T  and  Novaifis,  it 
appears  that  the  aforementioned  payments  to  the  Essential  Consultants  Account  and  MDC&A 
Account  were  for  political  consulting  work,  including  consulting  for  intei'national  clients  on  issues 
pending  before  the  Tramp  administration.  Specifically,  from  my  review  of  emails  from  the  Cohen 
Gmail  Account,  the  Cohen  MDCPC  Account,  and  public  sources,  I  have  learned  the  following: 

a.  On  or  about  April  28,  2017,  Cohen  sent  an  email  to  an  individual  whom  I  believe 
is  affiliated  with  KAI.  In  the  email,  Cohen  attached  a  “Consulting  Agreement”  between  KAI  and 
Essential  Consultants  dated  as  of  about  May  1,  2017.  The  agreement  indicates  that  Essential 
Consultants  had  the  address  of  Subject  Premises-2.  The  document  indicates  that  Essential 
Consultants  would  render  “consulting  and  advisory  services,  as  requested  ’  by  KAI,  and  that  KAI 
would  pay  Essential  Consultants  “a  consulting  fee  of  One  Million  Two  Hundred  Thousand 
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($1,200,000.00)  US  Dollars,”  disbursed  thi'ough  eight  $150,000  mstallments  between  May  2017 
and  December  2017.  I  have  also  reviewed  invoices  in  amounts  of  $150,000  that  Cohen  emailed 
to  an  individual  whom  I  believe  is  affiliated  with  KAI.  At  the  top  of  the  invoices  the  address  listed 
for  Essential  Consultants  is  the  address  for  Subject  Premises-2. 

b.  On  or  about  May  8,  2017,  Cohen  sent  an  email  to  an  individual  whom  I  believe  is 
affiliated  with  BTA  Banlc.  The  signature  block  on  Cohen’s  email  listed  “Essential  Consultants 
LLC”  and  “Michael  D.  Cohen  &  Associates,  PC”  and  provided  the  address  for  Subject  Premises- 
2.  In  the  email,  Cohen  attached  a  document  purporting  to  be  a  “Consulting  Agreement”  between 

BTA-Bank  and  EssentiakConsultants  dated  as  of  about  May  8, 2017.— The  agieementindicates-that- 

Essential  Consultants  had  the  address  of  Subject  Premises-2.  The  document  indicates  that 
Essential  Consultants  would  render  ‘Consulting  and  advisory  services”  to  BTA  Bank,  and  that 
BTA  Bank  would  pay  Essential  Consultants  “a  consulting  fee  of  One  Million  Eight  Hundred 
Thousand  ($1,800,000.00)  US  Dollars,”  disbursed  thi'ough  monthly  payments  of  $150,000.  On  or 
about  May  10, 2017,  Cohen  sent  an  email  to  an  employee  of  BTA  Banlc,  and  attached  to  the  email 
an  invoice  to  BTA  Banlc  in  the  name  of  Essential  Consultants,  with  the  address  of  Subject  Premises- 
2.  The  invoice  contemplated  a  $150,000  payment  to  Essential  Consultants  for  a  “monthly 
consulting  fee.” 

c.  On  or  about  January  23,  2017,  Cohen  appears  to  have  entered  into  a  consulting 
agreement  with  AT&T,  which  contemplates  that  Essential  Consultants  “shall  render  consulting  and 
advisory  services  to  [AT&T]”  and  that  AT&T  would  “advise  [Essential  Consultants]  ofthose  issues 
and  matters  with  respect  to  which  AT&T  Services  desires  [Essential  Consultants] ’s  assistance  and 
advice.”  The  agi-eement  indicates  that  Essential  Consultants  had  the  addi'ess  of  Subject  Premises- 
1.  The  contract  calls  for  AT&T  “to  pay  the  Consultant  for  his  services  ...  a  consulting  fee  of  Fifty 
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Thousand  ($50,000)  Dollai's  ...  per  month.”  Based  on  my  review  of  reports  of  interviews  with 
AT&T  employees,  I  have  learned  diat  AT&T  retained  Cohen  to  consult  on  political  issues, 
including  net  neutrality,  the  merger  between  AT&T  and  Time  Warner,  and  tax  reform. 

d.  On  or  about  March  1,  2017,  Cohen  appears  to  have  entered  into  a  contract  between 
Novartis  and  Essential  Consultants,  which  provides  that  Essential  Consultants  will  “provide 
consulting  and  advisory  services  to  Novartis  on  matters  that  relate  to  the  repeal  and  replacement  of 
the  Affordable  Care  Act  in  the  US  and  any  other  issues  mutually  agreeable  to  [Essential 
Consultants]  and  Novartis.”  The  conb'act  provides  for  a  “consulting  fee  of  One  Million  Two 
Hundr:ed2Ilrousani($l,200,00a)_US  dollars,” to be.paidToJEssential  ConsultantsJn_eciualmonM3L 
installments  over  the  course  of  a  year.  Based  on  my  review  of  reports  of  interviews  with  Novartis 
employees,  I  have  learned  that  Novartis  retained  Cohen  to  provide  political  consulting  services  and 
to  gain  access  to  relevant  policymakers  in  the  Tinimp  Administration. 

e.  In  or  about  February  2017,  Cohen  began  negotiating  the  terms  of  a  “strategic 
alliance”  with  Squire  Patton  Boggs.  On  or  about  March  4,  2017,  Squire  Patton  Boggs  emailed 
Cohen  a  “strategic  alliance  agreement.”  Under  the  terms  of  the  agreement,  Cohen  agreed  to 
generate  business  for  the  law  firm,  and  Squire  Patton  Boggs  agreed  to  pay  to  Cohen  “an  annual 
strategic  alliance  fee  of  $500,000,  payable  in  twelve  (12)  equal  monthly  installments.”  Squne 
Patton  Boggs  also  agreed  to  provide  Cohen  with  “dedicated  and  segregated  office  space  m  [Squire 
Patton  Boggs’s]  New  York  and  Washington  D.C.  offices,  which  office  space  shall  be  physically 
separate  from  [Squire  Patton  Boggs’s]  offices  and  have  locked  doors  and  its  own  locked  file 
cabinets.”  On  or  about  April  3,  2017,  Squire  Patton  Boggs  announced  on  its  website  that  is  had 
formed  a  “strategic  alliance”  with  Michael  D.  Cohen  &  Associates  and  would  “jointly  represent 
clients.” 
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20.  Despite  the  significant  amount  of  money  that  Cohen  received  into  the  Essential 
Consultants  Account  and  the  MDC&A  Account,  and  the  cash  balance  in  both  accounts,  Cohen  did 
not  disclose  that  infonnation  to  Sterling  or  Mehose.  Specifically,  based  on  my  review  of  documents 
provided  by  Getzel  (as  noted  above,  Cohen’s  accountant  at  the  time),  my  participation  in  an 
Getzel,  notes  and  I 

have  learned  the  following: 

a.  In  or  about  May  2017,  Getzel  met  with  Cohen  at  Subject  Pi‘emises-2.  At  the 
meeting,  Cohen  told  Getzel,  in  sum  and  substance,  that  he  had  set  up  a  law  practice  called  Michael 
-D^Cohen  &  Associates  E.C.,  and  a  consulting-company  called  EssentiaLGonsultants  LLC..„C_Qhea_ 
told  Getzel,  in  sum  and  substance,  that  he  expected  to  earn  $75,000  per  month  in  connection  with 
his  law  practice,  and  that  he  expected  gross  revenues  for  the  consulting  business  to  be  between  five 
and  six  million  dollars  annually. 

b.  In  or  about  October  2017,  if  not  earlier,  Getzel  was  preparing  a  personal  financial 
statement  for  Cohen.  On  or  about  October  6,  2017,  Getzel  sent  an  email  to  Cohen  in  which  Getzel 
wrote  that  “[ajttached  is  a  draft  of  the  new  PFS  as  of  September  30,  2017”  and  attached  a  draft  of 
the  September  2017  Financial  Statement.  The  draft  statement  reflected  that  as  of  September  30, 
2017,  Cohen  had  only  $1,250,000  in  cash,  total  assets  of  approximately  $33,430,000  (comprised  of 
taxi  medallion  intei-ests,  real  estate  interests,  and  his  personal  residence  and  propeify),  and  liabihties 
of  approximately  $45,630,000,  leaving  him  purportedly  over  $  12  million  in  debt.  In  the  same  email, 
Getzel  questioned  Cohen,  in  sum  and  substance,  about  the  fact  that  the  financial  statement  did  not 
list  any  value  associated  with  either  the  Essential  Consultants  Account  or  the  MDC&A  Accomit: 
“[w]e  did  not  add  any  value  for  you[r]  two  operating  entities  -  Michael  D.  Cohen  &  Associates 


2017.08.02 


30 


Case  l:18-cr-00602-WHP  Document  48-2  Filed  07/18/19  Page  39  of  201 


POC  [.y/c]  and  Essential  Consultants  LLC.  Please  advise  whether  or  not  these  should  be  diselosed 
and  what  value.” 

e.  On  or  about  October  6, 20 1 7,  Cohen  called  Getzel  by  telephone — which  is  reflected 
on  toll  records  for  Cohen’s  cellphone — and  told  Getzel,  in  sum  and  substance,  not  to  include 
Essential  Consultants  or  MDC&A  in  the  September  2017  Financial  Statement  because  they  had  no 
value.  On  or  about  October  6,  2017,  following  the  call  with  Getzel,  Cohen,  using  the  Cohen 
Account,  responded  to  Getzel’s  email  with  the  answer  “[l]ooks  good  to  me.”  Cohen  never  directed 
Getzel  to  make  any  changes  to  his  cash  position  as  listed  in  the  September  2017  Financial 

StatemenC-ImaJettendated-October-  6,-2017,  addressed  to-Getzel,  Cohen  stated,— Lhave^reviewed- 

the  attached  statement  of  financial  condition  and  find  it  to  be  correct  and  consistent  with  the 
representations  that  I  made  to  your  firm.  The  attached  is  an  accurate  reflection  of  my  assets, 
liabilities  and  net  worth  (deficit)  as  of  September  30,  2017.”  Attached  to  that  letter  was  the 
September  2017  Financial  Statement,  which,  as  noted  above,  was  then  transmitted  to  Sterling  in 
connection  with  the  proposed  taxi  medallion  transaction  between  Sterling,  Cohen,  and^^^^^^^^ 

21.  Based  on  my  review  of  a  report  of  an  inteiview  with  Sterling  Employee- 1, 1  have 
learned  that  Cohen  did  not  disclose  his  income  stream  fi'om  Essential  Consultants  to  Sterling 
Employee-1  or,  to  his  Icnowledge,  anyone  else  at  Sterling.  According  to  Sterling  Employee-1, 
knowledge  of  such  an  income  stream  would  have  affected  Sterling’s  demands  during  the 
negotiations,  particularly  with  respect  to  the  amount  of  a  principal  paydown  of  Cohen’s  debt. 

Cohen  Understated  His  Available  Cash 

22.  In  addition  to  withholding  the  existence  of  his  Essential  Consultants  income  firom 
Sterling  and  Melrose,  it  appears  that  Cohen  also  substantially  understated  his  available  cash  and 
cash  equivalents  in  his  financial  disclosures.  Specifically,  I  know  ixom  my  review  of  the  September 
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2017  Financial  Statement  that  Cohen  provided  to  Sterling  that  Cohen  represented  that  he  had 
$1,250,000  in  cash  as  of  September  30, 2017.  I  also  know  that  on  or  about  January  30,  2018,  in  a 
telephone  call  with  Sterling  Employee-3,  and  on  February  1,  2018,  in  an  email  to  Sterling 
Employee-3,  Cohen  represented  that  he  did  not  have  more  than  $1,250,000  in  cash.  But,  from  my 
review  of  a  summary  of  bank  records  that  were  scheduled  by  forensic  accountants,  I  have  learned 
that  Cohen  had  approximately  $5,000,000  in  cash  and  cash  equivalents  as  of  September  30, 2017. 
Additionally,  as  of  February  1,  2018,  Cohen  had  approximately  $6,000,000  in  cash  and  cash 
equivalents.  Specifically,  from  my  review  of  the  account  schedule  and  bank  records,  I  have  learned 

the  following:- — - - - - — - - - — — - —  - 

a.  Cohen  has  three  checking  and/or  savings  accounts  at  Capital  One  Bank,  one  of 
which  is  in  his  wife’s  name.  As  of  September  30,  2017,  Cohen  had  $1,105,680.35  in  his  savings 
account,  and  $1,262,982.29  in  total  in  the  thi*ee  accounts  at  Capital  One  Banlc.  As  of  February  1, 
2018,  Cohen  had  a  total  of  $1,389,245.78  in  these  accounts. 

b.  Cohen  has  thi-ee  accounts  at  Morgan  Stanley  in  his  name.  As  of  September  30, 
2017,  the  combined  total  in  cash  and  cash  equivalents  in  those  three  accounts  was  $1,270,600.41. 
As  of  February  1, 2018,  Cohen  had  $1,284,996.13  in  these  accounts. 

c.  As  of  September  30, 2017,  Cohen  had  $260,689.18  in  an  account  at  SignatoeBank. 
As  of  February  1, 2018,  Cohen  had  $261,517.55  in  this  account. 

d.  In  addition  to  the  Essential  Consultants  Account  and  MDC&A  Account  at  First 
Republic,  Cohen  also  had  two  joint  checldng  accounts  with  Laura  Cohen  at  First  Republic.  In  total, 
as  of  September  30,  2017,  Cohen  had  at  least  $1,876,209.27  in  total  in  his  four  accounts  at  First 
Republic.  As  of  February  1, 2018,  Cohen  had  $3,332,992.95  in  these  accounts. 
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e.  Cohen  has  an  account  at  Bethpage  Credit  Union  with  $25,931.39  in  it  as  of  ; 

I 

September  30, 2017. 

f.  As  of  September  30, 2017,  Cohen  had  $17,542.54  in  accounts  at  Sterling.  \ 

I 

g.  Cohen  has  two  accounts  at  TD  Bank — one  in  his  name  and  one  held  jointly  with  his  | 

wife.  Cohen  also  has  a  safety  deposit  box  at  TD  Bank— Subject  Premises-3.  The  safety  deposit  j 

box  was  opened  on  December  13,  2017  in  the  names  of  Michael  and  Laura  Cohen.  I 

h.  In  total,  as  of  September  30, 2017,  Cohen  had  at  least  $4,713,935.08  in  his  accounts  j 

at  Capital  One  Bank,  City  National  Bank,  Signature  Bank,  Sterling  Bank,  Bethpage  Credit  Union,  > 

-First-Republicrand-Morgan-StanleyT— As  of-Februaiy-1^2018;-Cohen  had~$6,~268,7B2A9-in  his  — — — — - i 

accounts  at  Capital  One  Baidc,  City  National  Bank,  Signature  Banlc,  First  Republic,  and  Morgan 
Stanley.^^ 

P 

23.  Accordingly,  based  on  the  foregoing,  it  appears  that  Cohen’s  written  and  oral  | 

representations  to  Sterling  and  Melrose  that  he  did  not  have  more  than  $1,250,000  were  false,  and 
that  Cohen  withheld  infonnation  regarding  approximately  $5  million  in  funds  from  Sterling  and 
Melrose  in  order  to  secure  favorable  terms  in  his  renegotiation  of  his  medallion  loan.  Based  on 
my  participation  in  an  interview  with  Stei'ling  Employee-2,  and  my  review  of  reports  of  interviews  | 

with  Sterling  Employee-1  and  two  Melrose  employees,  it  is  my  understanding  that  that  Sterling 

I 

and  Melrose  would  view  Cohen’s  understating  of  his  assets  as  material  to  its  decision  whether  to  j' 

renegotiate  Cohen’s  medallion  loans  and  on  what  terms,  or  to  its  decision  whether  approve  of  the 
transfer  of  those  loans  to 

Based  on  my  review  of  the  account  schedules  described  above,  I  know  that,  as  of  the  date  of  this  | 

affidavit,  the  account  balances  for  TD  Banlc  have  not  yet  been  included  in  the  schedule  for  either  | 

date  and  the  account  balances  for  Sterling  National  Banlc  and  Bethpage  Credit  Union  have  not  yet 
been  included  in  the  schedule  for  February  1,  2018.  Thus,  to  the  extent  that  these  accounts  have 
positive  balances,  Cohen’s  total  balances  in  fact  were  even  higher  on  these  dates.  j. 
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Cohen  Has  Unreported  Interest  Income 

24.  It  appears  that  Cohen  also  hid  from  Sterling  interest  income  that  he  was  receiving  in 
connection  with  a  six  million  dollar  loan  he  made  to  another  individual.  Specifically,  I  know  from 
my  review  of  the  May  2017  Financial  Statement  and  September  2017  Financial  Statement  that 
Cohen  provided  to  Sterling  that  Cohen  did  not  disclose  that  he  had  made  a  note  receivable  in  the 
amount  of  approximately  $6  million,  or  that  he  was  earning  approximately  $60,000  per  month  in 
interest  income  in  connection  with  that  loan.  But,  from  my  review  of  a  summary  of  bank  records 
that  were  reviewed  by  another  law  enforcement  agent,  my  review  of  propeify  records  and 

doGuments-obtainedpursuantto  the- Cohen  EmaiLWaiTants,animy_participationinLanjnter¥iew_ 

with  Getzel,  I  have  learned  the  following: 

a.  Based  on  my  review  of  property  records,  I  have  learned  that  on  or  about  March  12, 

Cohen  to  approximately 

$2,000,000.^°  It  appears  that  the  promissory  note  was  unsecm-ed  by  any  real  property.  On  or  about 
April  28,  2014,  Cohen  and^^^|  amended  the  promissory  note,  and  restructured  the  loan  to 
increase  the  principal  amount  to  approximately  $5,000,000.  Under  the  terms  of  the  amended 
promissory  note,  the  loan  was  secured  apartment  in  Suimy  Isles  Beach,  Florida.  On 

or  about  April  8,  2015,  Cohen  ai^^^^|restated  the  promissory  note  to  increase  the  principal 
amount  to  $6,000,000.^* 

b.  Based  on  my  review  of  a  copy  of  the  restated  note,  which  was  obtained  pursuant  to 
the  Cohen  Bmail  Warrants,  I  have  learned  that  under  the  terais  of  the  amended  and  restated 

j^jnemiedfom 

The  note  states  that  the  loan  is  to  husband  and  wife, 

jointly  and  severally.  For  ease  of  reference,  I  refer  simply  to  '^^^^^^herein. 
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promissory  note,  Cohen’s  loan  to^^^^lis  an  interest-only  loan,  and  that  the  principal  balance 
of  the  loan  bears  interest  at  an  annual  rate  of  12.25  percent.  I  also  know  tliat  the  amended  and 
restated  promissory  note  includes  a  schedule  of  payments  that  require^^^^^^^to  pay  Cohen 
approximately  $6 1 ,250  per  month  beginning  in  April  2015  and  ending  in  April  2019.  The  note  also 
requu'es  tha^^^^^^repay  tire  principal  balance  of  $6,000,000  on  April  28, 2019. 

c.  Based  on  my  review  of  bank  records,  I  have  learned  that,  consistent  with  the  terms 
of  the  amended  and  restated  promissory  note,  ^^^^|has  made  monthly  payments  of 
approximately  $61,250  since  April  2015.  Specifically,  based  onmy  review  of  records  maintained 
-by-Capital  One  Bank,  I  haveJeamedthat  fi-om  April  201 5Jo-October  2015,  Cohen  received  checks^ 
from  entity  called^^^^^^^^^^^^^^^^^^^^^^^^^^^totaling  $61,250  per  month,  whieh  he 
deposited  into  his  personal  bank  account  at  Capital  One  Bank.^^  It  appears  from  my  review  of  bank 

sources  tha^^^^^|  is  of 

From  my  review  of  records  maintained  by  Capital  One  Bank,  I  have  also  learned  that  sinee  October 
2015,  Cohen  hais  received  checks  fr'om  an  entity  called  totaling 

$61,250  per  month,  which  he  deposited  into  his  personal  bank  account  at  Capital  One  Bank.  It 
appears  from  my  review  of  bank  records  and  public  souixes  that  owner  of 

In  total,  it  appeai-s  that  Cohen  receives  approximately  $735,000  per  year 
in  interest  payments  from^^^^f 

d.  Based  on  my  review  of  Cohen’s  May  2017  and  September  2017  Finaneial 
Statements,  my  review  of  his  2015  and  20 16  tax  returns  obtained  via  subpoena  and  fi-om  the  Cohen 
Email  Warrants,  and  my  participation  in  an  interview  with  Getzel,  I  have  learned  that  Cohen  did 


In  April  2015,  Cohen  received  a  pro-rated  payment.  For  all  months  thereafter,  the  total  payment 
equaled  $61,250,  but^^^^Htften  made  the  payment  in  multiple  checks. 
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not  disclose  this  interest  income  he  was  receiving  from  Sterling  or  Mehrose,  or  list  it 

on  his  tax  returns.  I  have  also  learned  that  while  this  interest  income  is  taxable,  Cohen  did  not  tell 
Getzel — ^liis  accountant — about  the  income,  and  Getzel  only  learned  about  the  income  because  he 
began  doing  ^^^^^^|taxes  in  2017.^^ 

25.  Accordingly,  based  on  the  foregoing,  it  appears  that  Cohen’s  representations  to 

Sterling  and  Melrose  tliat  he  did  not  have  more  than  $1,250,000  were  false,  and  that  Cohen 
withheld  infonnation  relating  to  the  interest  income  he  is  receiving  from  order  to 

secure  favorable  temis  in  his  renegotiation  of  his  medallion  loan. 

. . ^ . . — Cohen-Had-^a-Side-Agreement-With-^^^^^^j - - = — r- 

26.  As  set  forth  in  detail  below,  dui'ing  the  course  of  Cohen’s  negotiations  to  sell  his 

intei'est  in  taxi  medallions  and  the  associated  debt  to  Cohen  not  only 

misrepresented  his  financial  position  to  Sterling,  but  also  failed  to  disclose  a  side  agreement  he 
had  negotiated  with^^^^|;  it  appears  thal^^^^^igreed  to  pay  an  above-market  price 
for  Cohen’s  taxi  cab  medallions,  and  in  exchange,  Cohen  agi'eed  to  pay  |^^^^^^|approximately 
$3.8  million  in  cash.  Specifically,  from  my  review  of  documents  produced  pursuant  to  a  subpoena 
by  Sterling,  and  my  participation  in  interviews  with  Sterling  Employee-1,  Sterling  Employee-2, 
and  Sterling  Employee-3, 1  have  learned,  among  other  things,  the  following: 

a.  On  or  about  September  5,  2017,  an  executed  teim  sheet  was  circulated  by  Sterling 
Employee-1  to  Cohen  and|||||||||||||||||  The  tern  sheet  listed  Cohen’s  address  as  the  address  for 
Subject  Premises-1.  According  to  the  term  sheet,  ^^^^^^^^fwould  bonnw  $20,000,000 
from  Sterling  and  Melrose,  to  be  secured  by  the  medallions  that  to  acquire  from 


Accordingly,  this  interest  income — ^which  should  have  been  reported  as  such  on  Cohen’s  tax 
returns — is  included  herein  in  calculations  of  Cohen’s  true  cash  position. 
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Cohen.  At  a  price  of  $20  million  for  thuty-two  taxi  medallions,  the  proposed  transaction  valued 
each  medallion  as  woifh  $625,000.  The  tenn  sheet  also  contemplated  a  $1,265,913  pay-down  of 
the  principal  balance  of  the  loan.  The  term  sheet  made  no  mention  of  a  $3.8  million  payment  from 
Cohen  to  any  other  form  of  payment  or  financial  transaction  between  the  parties. 

b.  Additionally,  an  internal  Sterling  credit  memorandum,  dated  October  4,  2017, 
describing  the  teims  of  the  Cohen-'\^^^^|transaction  and  the  new  loan  to 

not  mention  any  payments  fi'om  Cohen  to^^^^^^^includmg  a  $3.8  million  payment.  Hie 
memorandum  also  noted  that  the  “loan  amount  of  $20MM  indicates  a  $625M  purchase  price  per 

medallionT^but— it  is-reeognized-that  this  ismot_in_line_witlLcurrentJnarlcetJvalues.” _ Indeed,. 

according  to  an  internal  Sterling  memorandum  dated  February  5,  2018,  in  the  month  of  January 
2018,  taxi  medallions  sold  for  amounts  ranging  from  $120,000  to  $372,000.  According  to  Sterling 
Employee-1  and  Sterling  Employee-2,  they  were  never  told  that  agreed  to  a  purchase 

price  of  $625,000  in  exchange  for  a  lump  sum  payment  from  Cohen,  or  that  Cohen  would  make 
any  payment  to  ^H|||||||||||H 

c.  On  or  about  January  30,  2018,  Sterling  Employee-3  asked  Cohen  whether  Cohen 

had  a  side  agreement  witl^^^^^^^^to  pay  sum  of  money  for  entering  into  the 

medallion  transaction.  Sterling  Employee-3  asked  Cohen  about  such  an  arrangement  because, 
according  to  Sterling  Employee-3,  the  price  that^^^^^^l/'as  paying  for  each  medallion 
appeared  to  be  well  above  the  market  price.  Cohen  stated,  in  sum  and  substance,  that  he  had  no 
side  agreement — ^and  never  had  a  side  agi’eement — ^with 

27.  While  Cohen  an(|^H|||H|m  did  not  disclose  any  payment  from  Cohen  to 
communications  with  Sterling,  it  appears  that  such  a  payment  was  contemplated. 
Indeed,  based  on  my  review  of  records  maintained  by  Getzel,  and  my  participation  in  an  interview 
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with  Getzel,  I  have  learned  the  following,  in  substance  and  in  part,  regai-ding  the  proposed  side 
payment  from  Cohen  to 

a.  On  or  about  September  19,  2017,  Getzel  prepared  a  memorandum  for  Cohen 
entitled,  “Sale  of  NYC  Medallion  Entities  and  Debt  Assumption”  (the  “Getzel  Memorandum”). 
Tlie  Getzel  Memorandum  summarized  the  proposed  transaction  between  Cohen  and 
in  part,  as  follows:  ‘Michael  and  Laura  Cohen  will  transfer  ownership  of  theh  13  NYC  medallion 
entities  to  a  Buyer  who  will  assume  their  bank  indebtedness,  upon  the  [Cohens’]  paying  down  the 
debt  portfolio  of  the  13  entities  by  $500,000  and  a  cash  payment  to  the  Buyer  of  $3,800,000.”^'^ 

_ ^^^b—According  to  Getzel^CohenAold  him  the-parameters  oJLthe„deal,  Jncluding_frie_ 

payment  of  $3,800,000  to  but  Getzel  did  not  know  where  Cohen  was  going  to  obtam 

$3,800,000  to  As  noted  above,  Cohen  had  more  than  $5,000,000  in  cash  and 

cash  equivalents  as  of  September  2017,  but  had  only  disclosed  in  his  September  2017  Finmcial 
Statement  that  he  had  $  1 .25  million  in  cash. 

28.  Based  on  my  review  of  records  maintained  by  Sterling  (as  well  as  Melrose,  the  bank 
with  the  participating  interest  in  the  loans)  and  reports  of  interviews  of  representatives  of  Sterling 
(and  Mehose),  I  have  seen  no  evidence  that  Sterling,  Mehose,  or  any  other  financial  institution 
involved  in  the  potential  deal  with  Cohen  and  ^^^^^|vas  aware  of  the  planned  $3.8  million 

side  payment  from  Cohen  to 

The  Illegal  Campaign  Contribution  Scheme 

29.  The  US  AO  and  FBI  are  also  investigating  a  criminal  violation  of  campaign  finance 
laws  by  Michael  Cohen.  As  set  forth  below,  there  is  probable  cause  to  believe  that  Cohen  made 


The  reference  to  thirteen  medallions  appears  to  be  an  error  by  Getzel.  Cohen  and  his  wife 
together  owned  sixteen  corporations,  which  in  turn  owned  32  taxi  medallions. 
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an  excessive  in-kind  contribution  to  the  presidential  election  campaign  of  then-candidate  Donald 
Trump  in  the  form  of  a  $130,000  payment  to  Stephanie  Clifford,  an  individual  who  was  rumored 
to  have  had  an  extramarital  affair  with  Trump,  in  exchange  for  her  agreement  not  to  disclose  that 
alleged  affair.  As  set  forth  below,  there  is  probable  cause  to  believe  that  this  payment  was  intended 
to  keep  Clifford  from  making  public  statements  about  the  rumored  affair  on  the  eve  of  the  2016 
presidential  election,  and  thus  constitutes  a  campaign  contribution  in  excess  of  the  applicable  limit. 

30.  From  my  review  of  public  sources,  I  have  learned  the  following: 

a.  In  or  around  October  2011,  there  were  rumors  published  on  the  gossip  websites 


77?ei)fr^.coff7  that~Tinmp  had  had  an  extramaiital-affair-with  Cliffordiran  adult-film  actress  whose 


screen  name  is  Stormy  Daniels,  in  or  around  July  2006.  In  or  about  October  2011,  Life  &  Style 
Magazine,  a  tabloid  sold  in  supeimarkets,  also  published  an  article,  based  on  the  report  in 
TheDirty.com,  alleging  an  affair  had  occuired  between  Tinmp  and  Clifford.  Both  Trump  and 
Clifford,  through  their  representatives,  issued  denials  in  response  to  the  articles. 

b.  Specifically,  on  or  about  October  1 1, 201 1,  Keith  Davidson,  who  identified  himself 
as  Clifford’s  attorney,  sent  a  cease  and  desist  letter  to  TheDirty.com,  demanding  that  the  article 
regarding  Trump  and  Clifford  be  removed  from  the  website.  Additionally,  on  or  about  October 
12,  2011,  Cohen,  who  was  then  Executive  Vice-President  and  Special  Counsel  to  the  Tnimp 
Organization,  stated  to  E!  News  that  “[t]he  totally  untrue  and  ridiculous  story  .  .  .  emanated  from 

a  sleazy  and  disgusting  website _ The  Tiump  Organization  and  Donald  J.  Trump  will  be  bringing 

a  lawsuit .  .  .  [and]  Mr.  Trump  and  the  Trump  Organization  would  like  to  thank  and  commend 
Stormy  Daniels  and  her  attorneys  for  their  honesty  and  swift  actions.” 

31.  On  or  about  June  16,  2015,  Trump  formally  launched  his  2016  presidential 
campaign.  On  or  about  May  4,  2016,  Trump  became  the  presumptive  Republican  Party  nominee 
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for  president,  and  on  July  19,  2016,  Trump  officially  became  the  nominee.  Based  on  my  review 
of  public  soui'ces,  I  have  learned  that  while  it  does  not  appear  that  Cohen  had  an  official  title  as 
part  of  the  Trump  campaign,  on  multiple  occasions  Cohen  made  public  statements  on  behalf  of 
Trump  or  his  campaign.  For  instance,  on  or  about  August  18,  2016,  Cohen  appeared  on  CNN  to 
defend  Trump’s  polling  numbers. 

32,  On  or  about  October  7,  2016,  The  Washington  Post  published  online  a  video  and 
accompanying  audio  m  which  Trump  refened  to  women  in  what  the  article  described  as  “vulgar 
terms”  in  a  2005  conversation  with  Billy  Bush,  who  was  then  the  host  of  Access  Hollywood.  The 

-following-day^on-October  8,  2016,-Trump-appeared  in-a-videoJn-Which  he  stated,_among_olher_ 

things,  “Fve  said  and  done  things  I  regret  and  words  released  today  on  this  more  than  a  decade  old 
video  are  one  of  them.  Anyone  who  knows  me  loiows  these  words  don’t  reflect  who  I  am.  I  said 
it.  I  was  wrong  and  I  apologize.”  Based  on  my  review  of  public  sources,  I  also  know  that 
representatives  of  the  Trump  Campaign  stated,  in  sum  and  substance,  that  the  Access  Hollywood 
comment  was  an  old  and  isolated  incident. 

33.  Based  on  my  review  of  public  sources,  including  an  article  published  in  Slate 
magazine  by  a  reporter  who  interviewed  Clifford,  I  have  learned  that  around  this  same  time,  in  or 
about  October  2016,  Clifford  was  in  discussions  with  ABC’s  Good  Morning  America  sliow  and 
Slate  magazine,  among  other  media  sources,  to  provide  these  media  outlets  with  her  statement 
about  her  alleged  relationship  witli  Trump.  According  to  the  article  in  Slate,  which  the  author 
based  on  conversations  with  Clifford  over  the  telephone  and  by  text  message,  Clifford  wanted  to 
be  paid  for  her  story  or  be  paid  by  Trump  not  to  disclose  her  accusation.  As  Cohen  summarized 
in  a  201 8  email  obtained  pursuant  to  the  Cohen  Email  Warrants:  “fir  October  2016, 1  was  contacted 
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by  counsel  for  Ms.  Clifford  stating  that  news  outlets,  including  were  pursuing  the  201 1 

story  of  an  alleged  affau-  between  Mr.  Trump  and  Ms.  Clifford.” 

34.  From  my  review  of  telephone  toll  records^^  and  information  produced  pursuant  to 
the  iCloud  Wan-ant  and  Cohen  Email  Warrants,  I  have  learned  that  in  the  days  following  the^cce^ 
Hollywood  video,  Cohen  exchanged  a  series  of  calls,  text  messages,  and  emails  with  Keith 
Davidson,  who  was  then  Clifford’s  attorney,  David  Pecker  and  Dylan  Howard  of  American  Media, 
Inc.  (“AMI”),  the  publisher  of  the  National  Enquirer Tmmp,  and  Hope  Hicks,  who  was  then 
press  secretary  for  Trump’s  presidential  campaign.  Based  on  the  timing  of  these  calls,  and  the 

-content  oEthe  texCmessages-and-emails,-I-believe_that  at  least_some„oKthese^communicatifilis_ 

concerned  the  need  to  prevent  Clifford  from  going  public,  particularly  in  the  wake  of  the  Access 
Hollywood  story.  In  particular,  I  have  learned  the  following: 

a.  On  October  8, 2016,  at  approxhnately  7 :20  p.m.,  Cohen  received  a  call  from  Hicks. 
Sixteen  seconds  into  the  call.  Trump  joined  the  call,  and  the  call  continued  for  over  four  minutes. 
Based  on  the  toll  records  that  the  USAO  has  obtained  to  date,  I  believe  that  this  was  the  first  call 


My  attribution  of  certain  telephone  numbers  to  certain  individuals  as  described  in  this 
affidavit  is  based  on  my  review  of  the  vCai'd  (virtual  contact  file)  and  text  messages  obtained  from 
Cohen’s  telephone  pursuant  to  the  iCloud  Warrant. 

Pecker  is  President  of  AMI  and,  according  to  his  own  statements  in  public  reports,  a  personal 
fiiend  of  Trump.  Howard  is  the  chief  content  officer  of  AMI,  who  according  to  public  records 
reports  directly  to  Pecker. 

I  believe  that  Trump  joined  the  call  between  Cohen  and  Hicks  based  on  my  review  of  toll 
records.  Specifically,  I  know  that  a  call  was  initiated  between  Cohen’s  telephone  number  and 
Trump’s  telephone  number  at  the  same  time  the  records  indicate  that  Cohen  was  talking  to  Hicks. 
After  the  Cohen-Trump  call  was  initiated,  it  lasted  the  same  period  of  time  as  the  Cohen-Hicks 
call.  Additionally,  the  toll  records  indicate  a  “-1”  and  then  Trump’s  telephone  number,  which, 
based  on  my  training  and  experience,  means  that  the  call  was  either  transfeiTed  to  Trump,  or  that 
Trump  was  added  to  the  call  as  a  conference  or  three-way  call  participant.  In  addition,  based  on 
my  conversations  with  an  FBI  agent  who  has  interviewed  Hicks,  I  have  learned  that  Hicks  stated, 
in  substance,  that  to  the  best  of  her  recollection,  she  did  not  learn  about  the  allegations  made  by 
Clifford  until  early  November  2016.  Hicks  was  not  specifically  asked  about  this  three-way  call. 
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Cohen  had  received  or  made  to  Hicks  in  at  least  multiple  weeks,  and  that  Cohen  and  Tnimp  spoke 
about  once  a  month  prior  to  this  date  —  specifically,  prior  to  this  call  on  October  8,  2016,  Cohen 
and  Trump  had  spoken  once  in  May,  once  in  June,  once  in  July,  zero  times  in  August,  and  twice 
in  September. 

b.  Approximately  ten  minutes  after  the  call  ended,  Hicks  and  Cohen  spoke  again  for 
about  two  minutes. 

c.  At  7:39  p.m.,  immediately  after  the  second  call  with  Hides  ended,  Cohen  called 
David  Pecker  (as  noted  above,  the  President  of  American  Media  Inc.,  or  AMI)  and  they  connected 

for  thu’ty^secondsr^pproximatelydour  minutes  lately  Cohen-ealled-Pecker-again-and-they-spoke 

for  more  than  a  minute.  Three  minutes  after  ending  his  call  with  Pecker,  Cohen  received  a  call 
fi-om  Dylan  Howard  (as  noted  above,  the  Chief  Content  Officer  of  AMI),  and  they  spoke  for 
approximately  a  minute.  According  to  toll  records,  it  does  not  appear  that  Cohen  and  Howard 
spoke  regularly  prior  to  October  8,  2016,  as  it  had  been  over  a  month  since  they  had  called  each 
other. 

d.  At  7:56  p.m.,  approximately  eight  minutes  after  his  call  with  Howard  ended,  Cohen 
called  Hicks  and  they  connected  for  two  minutes.  At  approximately  the  same  time  this  call  ended, 
Cohen  received  a  call  finm  Pecker,  and  they  spoke  for  about  two  minutes.  At  8:03  p.m.,  about 
three  minutes  afl;er  ending  his  call  with  Pecker,  Cohen  called  Trump,  and  they  spoke  for  nearly 
eight  minutes. 

e.  At  8:39  p.m.  and  8:57  p.m.,  Cohen  received  calls  from  Howard  and  spoke  to  him 
for  about  four  and  six  minutes,  respectively.  At  9:13  p.m.,  about  ten  minutes  after  Cohen  and 
Howai-d  hung  up  from  the  second  of  these  calls,  Howard  sent  Cohen  a  text  message  that  said: 
“Keith  will  do  it.  Let’s  reconvene  tomoreow.”  Based  on  my  involvement  in  this  investigation,  I 
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believe  that  when  Howard  wrote  “Keith,”  he  was  refening  to  Keith  Davidson,  the  attorney  for 
Stephanie  Clifford.  At  3:31  a.m.,  now  on  October  9,  2016,  Cohen  sent  Howard  a  text  message  in 
response  that  said:  “Thank  you.”  Eight  minutes  later,  Cohen  sent  Howard  a  text  message  that  said: 
“Resolution  Consultants  LLC.  is  the  name  of  the  entity  I  formed  a  week  ago.  Whenever  you  wake, 
please  call  my  cell.” 

f.  The  following  day,  on  October  1 0, 20 1 6,  at  1 0 : 5  8  a.m.,  Howard  sent  a  text  message 
to  Cohen  and  Davidson,  which  stated:  “Keith/Michael:  connecting  you  both  in  regards  to  that 
business  opportunity.  Spoke  to  the  client  this  AM  and  they’re  confirmed  to  proceed  with  the 

opportunityrThanksrDylanTOver  toyou  twoT^At  T2--2~5  punT^Davidson  sent  Cohen  a  text  message- 

that  stated:  “Michael— if  we  are  ever  going  to  close  this  deal  —  In  my  opinion,  it  needs  to  be  today. 
Keith.”  Davidson  and  Cohen  then  spoke  by  phone  for  about  three  minutes.  Based  on  my 
participation  in  this  investigation,  I  believe  that  when  Howard  wrote  that  the  “client”  was 
“confirmed  to  proceed  with  the  opportunity,”  he  was  referring  to  Clifford’s  agreement  in  principle 
to  accept  money  fi'om  Cohen  in  exchange  for  her  agreement  not  to  discuss  any  prior  affair  with 
then-candidate  Trump.^* 

g.  Based  on  my  review  of  records  obtained  pui'suant  to  die  Cohen  Email  Warrants,  I 
know  that  on  or  about  October  10, 2016,  Clifford  and  Davidson  appear  to  have  signed  a  side  letter 
agreement”  that  stated  it  was  an  exhibit  to  a  “confidential  settlement  agreement  and  mutual 
release”  between  “Peggy  Peterson”  and  “David  Dennison.”  The  purpose  of  the  document. 

As  set  forth  below,  AMI  was  also  involved  in  a  payment  to  model  Karen  McDougal. 
However,  because  these  communications  were  in  close  temporal  proximity  to  tire  events  involving 
the  negotiation  of  a  payment  to  Clifford,  the  execution  of  the  agi'eement  with  Clifford,  and  the 
payment  of  money  to  Clifford,  I  believe  that  these  communications  were  related  to  Clifford. 
Additionally,  based  on  my  review  of  public  statements  by  McDougal,  I  have  learned  that  she 
negotiated  an  agreement  with  AMI  several  months  prior  to  these  communications  between  Cohen 
and  Pecker,  Howard,  and  Davidson. 
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according  to  the  agreement,  was  to  define  the  “true  name  and  identity”  of  persons  named  by 
pseudonym  in  “confidential  settlement  agi'eement  and  mutual  release.”  The  side  letter  agi'eement 
specifies  the  identity  of  “Peggy  Peterson”  to  be  Clifford,  but  the  space  for  “Dennison’s”  identity 
is  blanlc.  The  agreement  also  includes  a  signature  page  for  “Peterson,”  “Dennison,  and  their 
attorneys.  The  signature  page  is  signed  by  “Peterson”  and  his  attorney,  Davidson,  but  the 
document  is  unsigned  by  “Dennison”  and  his  attorney.  Based  on  my  involvement  in  this 
investigation,  I  believe  that  Davidson  sent  Cohen  this  partially-signed  “side  letter  agreement”  in 
order  to  facilitate  the  closing  of  a  deal  between  Davidson’s  client  and  Cohen  or  his  client  on 

■  OctoberT  0^201 6-. - - - — ^ - - — 

35.  It  appears  that  on  October  13,  2016,  and  the  days  that  followed,  Cohen  took  steps 
to  complete  a  transaction  with  Davidson,  including  attempting  to  open  an  account  from  which 
Cohen  could  transfer  fiinds  to  Davidson.  Specifically,  from  my  review  of  toll  records,  information 
obtained  pursuant  to  the  iCloud  Warrant  and  Cohen  Email  Warrants,  recoids  maintained  by  First 
Republic,  as  well  as  my  participation  in  interviews  with  First  Republic  employees,  I  have  learned 
the  following: 

a.  On  the  morning  of  October  13, 2016,  at  8:54  a.m.,  Cohen  sent  Pecker  a  text  message 
that  stated:  “I  need  to  talk  to  you.”  At  9:06  a.m..  Pecker  sent  a  text  message  to  Cohen  that  stated, 
“I  called  please  call  me  back.”  The  tolls  between  Cohen  and  Pecker  do  not  show  a  telephone  call 
between  8:54  a.m.  and  9:06  a.m.  However,  based  on  my  review  of  text  messages,  I  have  learned 
that  Cohen  and  Pecker  communicate  with  each  other  over  Signal,  which  is  an  encrypted 
communications  cellphone  application  that  allows  users  to  send  encrypted  text  messages  and  make 
encrypted  calls. 
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b.  At  9:23  a.m.,  Cohen  sent  an  email  that  stated  “call  me”  to  Fii'st  Republic  Employee- 
2.  The  email  attached  documents  from  the  Secretaiy  of  State  of  Delaware  indicating  that  Cohen 
had  foiTned  a  Ihnited  liability  company  called  “Resolution  Consultants  LLC”  on  September  30, 
2016.  As  noted  above,  “Resolution  Consultants”  is  the  name  of  the  entity  tliat  Cohen  had  told 
Howard  he  had  formed  recently  after  Howard  said  Davidson  would  “do  it.”  At  10:44  a.m.,  Cohen 
called  First  Republic  Employee-2  and  told  hun,  in  sum  and  substance,  that  he  needed  an  aeeount 
in  the  name  of  “Resolution  Consultants”  opened  immediately,  and  that  he  did  not  want  an  address 
on  the  checks  written  out  of  the  account.  Later  that  day,  another  employee  at  First  Republic 
-emailed  Cohen-aecounLopening  paperwork-to-complete — Cohen  returaed  the  account-opening- 
documents  partially  completed,  but  failed  to  provide  a  copy  of  his  driver’s  license  or  passport,  and 
did  not  respond  to  the  employee’s  question  of  how  he  wanted  to  fund  the  account.  As  a  result,  the 
account  was  never  opened. 

c.  On  October  17, 2016,  Cohen  incorporated  Essential  Consultants  LLC  in  Delaware. 
That  same  day,  he  filed  paperwork  to  dissolve  Resolution  Consultants  LLC. 

36.  Despite  these  steps  taken  by  Cohen,  it  appears  that  the  negotiation  between  Cohen 
and  Davidson  was  not  progressing  sufficiently  fast  enough  for  Davidson  or  his  client,  Clifford, 
and  they  threatened  to  go  public  with  Clifford’s  allegations  just  days  before  the  presidential 
election.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the 
iCloud  Warrant,  and  public  sources,  I  know  the  following: 

a.  According  to  an  article  in  The  Washington  Post,  which  quoted  emails  sent  from 
Cohen’s  email  account  hosted  by  the  Trump  Organization,  on  October  17, 2016,  Davidson  emailed 
Cohen  and  threatened  to  cancel  the  aforementioned  “settlement  agreement”  by  the  end  of  the  day 
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if  Cohen  did  not  complete  the  transaction.^^  According  to  the  article,  Davidson  sent  Cohen  a 
second  email  later  in  the  day  that  stated  in  part,  “Please  be  advised  that  my  client  deems  her 
settlement  agreement  canceled  and  void.”  At  4:00  p.m.  that  day,  Cohen  called  Davidson  and  they 


spoke  for  over  five  minutes. 

b.  Cohen’s  4:00  p.m.  call  with  Davidson  and/or  Davidson’s  threats  to  cancel  the 
“settlement  agreement”  appear  to  have  touched  off  a  flurry  of  communications  about  the  settlement 
agreement  and  whether  Clifford  would  go  public.  Specifically: 

i.  At  4:43  p.m.,  Howai'd  sent  Cohen  a  text  message  that  stated:  “I’m  told 

they^re'going  with  DailyMailT^Are  you  aware?”  One  minute-lateiyCohen  responded:  Gallme. 


Based  on  my  involvement  in  this  investigation,  I  understand  Howard’s  text  to  mean  that  he  heard 
that  Clifford  was  going  to  take  her  story  of  an  extramarital  affair-  with  Trump  to  the  Daily  Mail,  a 
tabloid  newspaper. 

ii.  At  4:45  p.m.,  Howard  called  Cohen  and  they  spoke  for  over  two  minutes. 
Moments  later,  Davidson  and  Cohen  spoke  for  about  two  minutes. 

iii.  At  5:03  p.m.,  Cohen  attempted  to  eall  Trump,  but  the  call  only  lasted  eight 
seconds.  This  was  Cohen’s  first  call  after  he  spoke  with  Davidson. 

iv.  At  5:25  pjtn.,  Cohen  texted  Howard,  stating:  “Well???” 

V.  At  6:44  p.m.,  Howard  responded  to  Cohen’s  text,  stating:  “Not  taldng  my 

calls.”  Cohen  responded  one  minute  later:  “You’re  Iddding.  Who  are  you  hying  to  reach?” 
Howard  responded  one  minute  later:  “The  ‘agent.’”  Based  on  my  involvement  in  this 


Due  to  the  partially  covert  nature  of  the  investigation  to  this  date,  the  USAO  has  not  requested 
documents  from  the  Tmmp  Organization  or  Davidson,  and  thus  does  not  possess  the  email 
referenced  in  this  article. 
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investigation,  I  understand  Howard’s  text  messages  to  mean  that  he  attempted  to  contact  Davidson 
about  the  matter  involving  Clifford,  but  that  Davidson  was  not  taking  Howard’s  calls. 

vi.  At  6:49  p.m.,  Cohen  called  Howard  and  they  spoke  for  nearly  four  minutes, 
c.  The  following  day,  on  October  18,  2016,  TheSmoIdngGun.com,  a  website  that 
publishes  legal  documents  and  mugshots,  published  an  article  called;  “Donald  Trump  and  the  Ponr 
Superstar,”  which  alleged  that  Trump  had  an  extramarital  affair  with  Clifford.  However,  the 
article  noted  that  Clifford  had  declmed  to  comment. 

37.  On  or  about  October  25,  2016,  the  communications  between  Cohen,  Davidson, 

Howard  and'Pecker-picked  up-againrapparently  conceming^-transaetion-involving-Gliffordv- 

Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen  Email 
Warrants  and  iCloud  Warrant,  as  well  as  my  review  of  public  sources,  I  have  learned  the  following: 

a.  On  October  25,  2016,  at  6:09  p.m.,  Howard  sent  Cohen  a  text  message  stating: 
“Keith  calling  you  urgently.  We  have  to  coordinate  something  on  the  matter  he’s  calling  you  about 
or  its  [sic]  could  look  awfully  bad  for  everyone.”  One  minute  later,  Davidson  sent  Cohen  a  text 
message  stating  “Call  me.”  Cohen  and  Davidson  called  each  other  several  times  over  the  next  half 
hour  but  appear  not  to  have  connected.  At  6:42  p.m.,  Cohen  and  Davidson  spoke  for  about  eight 
minutes.  At  7:1 1  p.m.,  they  spoke  for  another  two  minutes. 

b.  The  next  morning,  on  or  about  October  26,  2016,  at  8:26  a.m.,  Cohen  called  Trump 
and  spoke  to  him  for  approximately  three  minutes.  At  8:34  a.m.,  Cohen  called  Tnrmp  again  and 
connected  for  a  minute  and  a  half. 

c.  At  approximately  9:04  a.m.^ — less  than  thirty  minutes  after  speaking  with  Tmmp — 
Cohen  sent  two  emails  to  the  person  who  had  incoiporated  Resolution  Consultants  and  Essential 
Consultants  for  him,  and  stated  “can  you  send  me  asap  the  filing  receipt”  and  then,  in  the  second 
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email,  “for  Essential  Consultants  LLC.”  That  person  responded  with  the  filing  receipt  two  minutes 
later  at  9:06  a.m.  and  with  the  certification  of  formation  23  minutes  later,  at  9:27  a.m. 

d.  Shortly  after  that,  Cohen  contacted  First  Republic  Employee-2  and  told  him,  in  sum 
and  substance,  that  he  decided  not  to  open  an  account  in  the  name  of  “Resolution  Consulting”  and 
instead  would  be  opening  a  real  estate  consulting  company  in  the  name  of  Essential  Consultants. 
Cohen  told  First  Republic  Employee-2  that  he  was  at  Trump  Tower,  and  wanted  to  go  to  a  First 
Republic  branch  across  the  sfteet  to  open  the  account,  so  First  Republic  Employee-2  called  First 
Republic  Employee-1,  a  preferred  banker  at  that  branch,  assist  Cohen.  At  11:00  a.m.,  Fii'st 

-Republic”Employee-l  ealled-eohen— I  Imow  ftom-my-paj-tieipation  in  an-interviewwvith  First- 

Republic  Employee-1,  that  around  the  time  of  the  call  he  went  to  Cohen’s  ofQce  in  Trump  Tower — 
on  the  same  floor  as  the  Trump  Organization — and  went  through  account  opening  questions, 
including  know  your  customer  questions,  with  Cohen.  In  response  to  a  series  of  know-your- 
customer  questions  about  the  purpose  of  the  account— the  answers  to  which  First  Republic 
Employee- 1  entered  into  a  form — Cohen  stated,  in  sum  and  substance,  that  he  was  opening 
Essential  Consultants  as  areal  estate  consulting  company  to  collect  fees  for  investment  consulting 
work,  and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States. 
Based  on  my  review  of  records  obtained  fi'om  First  Republic,  it  appears  that  this  account  (the 
“Essential  Consultants  Account”)  was  created  at  a  time  between  1 1:00  a.m.  and  1:00  p.m. 

e.  At  1:47  p.m.,  Cohen  called  Davidson  and  they  spoke  for  approximately  two 
minutes.  At  approximately  1 :49  p.m.,  Davidson  emailed  Cohen  wiring  instructions  for  an  attorney 
client  trust  account  at  City  National  Bank. 

f  After  the  Essential  Consultants  Account  was  opened  on  October  26,  2016,  Cohen 
ti-ansferred  $131,000  fi'om  a  home  equity  line  of  credit  that  Cohen  had  at  First  Republic  to  the 
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Essential  Consultants  Account.  Following  the  transfer,  at  approximately  4: 1 5  p.m.  on  October  26, 
2016,  Fii-st  Republic  Employee-2’s  assistant  emailed  Cohen  at  his  Trump  Organization  email 
addi'ess  to  tell  him  that  the  ftinds  had  been  deposited  into  the  Essential  Consultants  Account. 
Cohen  forwarded  that  email  to  the  Cohen  Gmail  Account  and  then  forwarded  it  to  Davidson. 

g.  At  6:37  p.m.,  Cohen  asked  Pecker  by  text  message,  “Can  we  speak?  Important.” 
Cohen  called  Pecker  at  6:49  p.m.  and  connected  for  thirty  seconds.  At  6:57  p.m.,  Cohen  sent 
Howard  a  text  message,  stating:  “Please  call  me.  Important.”  Cohen  called  Howard  at  7:00  p.in. 
and  connected  for  about  thufy  seconds.  At  7:06  p.m.,  Cohen  called  Pecker  again  and  they  spoke 

for  nearly"thirteen-minutes7  Af  7i24-pTm.~Howai-d  sent  a-text-message  to  Cohen  that4~^He-said 

he’d  call  me  back  in  20  minutes.  I  told  him  what  you  ai'e  asking  for  his  [sic]  reasonable.  I’ll  get 
it  sorted.”  Approximately  an  hour  later,  at  8:23  p.m.,  Howard  told  Cohen  by  text  message  to 
“check  your  Gmail  for  email  from  my  private  aeeount.”  In  an  email  sent  at  8:23  p.m.  by  Howard 
to  Cohen  and  Davidson,  with  the  subject  line  “Confirmation,”  Howard  stated,  “Thank  you  both 
for  chatting  with  me  earlier.  Confirming  agreement  on:  -  Exeeuted  agi'eement,  hand-signed  by 
Keith’s  client  and  returned  via  overnight  or  same-day  FedEx  to  Michael,  -  Change  of  agreement 
to  reflect  the  coiTect  LLC,  -  Transfer  of  funds  on  Thursday  AM  to  be  held  in  escrow  until  receipt 
of  agi'eement.”  After  receiving  that  email,  at  approximately  8:27  p.m.,  Cohen  asked  Howard  by 
text  message,  “Can  you  and  David  [Peeker]  give  me  a  eall.”  Howard  promptly  responded:  “David 
is  not  around  I  think.  I’ll  call.”  At  8:28  p.m.,  Howard  called  Cohen  and  they  spoke  for  three 
minutes. 

38.  On  October  27,  2016,  Cohen  made  a  payment  to  Davidson  of  $130,000 — ^with  the 
ftinds  intended  for  Clifford— for  the  purpose  of  seeuring  her  ongoing  silence  with  respect  to  the 
allegations  that  she  had  an  extramarital  affair  with  Trump.  Specifically,  based  on  my  review  of 
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toll  records,  bank  records,  and  information  obtained  pursuant  to  the  iCloud  Warrant  and  Cohen 

Email  Wairants,  I  have  learned  the  following: 

a.  At  9:47  a.m.,  Cohen  sent  Davidson  an  email,  stating:  “Keith,  kindly  confirm  that 
the  wh-e  received  today,  October  27,  2016  shall  be  held  by  you  in  your  attorney’s  tnast  account 
until  such  time  as  directed  for  release  by  me,  in  writing.  Additionally,  please  ensuie  that  all 
paperwork  contains  the  correct  name  of  Essential  Consultants  LLC.  I  thank  you  in  advance  for 
your  assistance  and  look  forward  to  hearing  from  you  later.” 

b.  At  approximately  10:01  a.m.,  according  to  records  provided  by  First  Republic 

”Banl<7^Cohemconipleted  paperwork  to  wire“$l'3  0^000  fromAhe  EssentiaFGonsultants-Aeeount 

which  had  been  funded  a  day  prior  from  Cohen’s  home  equity  line  of  credit— to  the  attorney  client 
tmst  account  at  City  National  Bank  that  Davidson  had  specified  in  the  wiring  instructions  he  sent 
to  Cohen.  The  wire  transfer  was  made  shortly  thereafter. 

c.  At  10:02  a.m.,  Davidson  responded  to  Cohen’s  email  fi-om  9:47  a.m.,  stating:  “I 
confirm  that  I  will  work  in  good  faith  &  that  no  funds  shall  be  disbursed  unless  &  until  the  plaintiff 
personally  signs  all  necessary  settlement  paperwork,  (the  form  of  which  will  match  the  prior 
agreement).  The  settlement  docs  will  name  the  coirect  corporation,  (Essential  Consultants  LLC). 
Plaintiff’s  signature  will  be  notarized  and  returned  to  you  via  FedEx.  Only  after  you  receive  FedEx 
will  I  disburse.  Fair?” 

d.  At  10:50  a.m.,  First  Republic  Employee-1  sent  Cohen  an  email  confirming  that  the 
payment  had  been  sent  and  providing  him  with  the  wire  number. 

39.  On  October  28,  2016,  and  the  days  that  followed,  Cohen  finalized  the  transaction 
with  Davidson.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant 
to  the  iCloud  Warrant,  public  soui'ces,  and  bank  records,  I  know  the  following: 
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a.  On  October  28, 20 1 6,  at  1 1 :48  a.m.,  Cohen  spoke  to  Trump  for  approximately  five 
minutes.  Beginning  at  1:21  p.m.,  Cohen  attempted  a  series  of  phone  calls  to  Davidson,  Pecker, 
and  Howard  throughout  the  day,  although  it  appears  he  may  only  have  connected  with  Howard. 

b.  Later  that  day,  at  approximately  7:01  p.m.,  Davidson  stated  to  Cohen  by  text 

message  that  “all  is  AOK.  I  should  have  signed,  notarized  docs  on  Monday.  You  should  have 
them  on  Tuesday.”  Cohen  thanked  him  and  said  “I  hope  we  are  good.”  Davidson  responded,  “I 
assure  you.  We  ai'e  veiy  good.”  Howard  also  texted  Cohen  at  7:08  p.m.,  “Keith  pavidson]  says 
we  ai*e  good.”  Cohen  then  responded  “OK”  to  Howard  and  “Excellent”  to  Davidson.  At 
'app^unately  l'OTSOll.m:;  Cohen  spokeAo'Hicks'for  to  '  * 

c.  On  October  31,  2016,  Cohen  called  Howard  at  8:22  p.m.  and  they  spoke  for  over 
three  minutes.  At  8:32  p.m.,  Cohen  received  text  messages  fi-om  both  Howard  and  Davidson. 
Howard  said:  “You’ll  have  paperwork  tomorrow  says  KD.”  Davidson  said:  “We  are  AOK.  You 
will  be  receiving  a  package  tomorrow.”  Cohen  responded  “Thank  you”  to  Howard  and  Thanks 
Keith.  Will  call  you  then”  to  Davidson.  From  my  involvement  in  this  investigation,  I  believe 
Davidson  was  referring  to  a  signed  nondisclosm'e  agreement  when  he  told  Cohen  that  he  would 
receive  a  package. 

d.  Based  on  my  review  of  comt  filings  that  became  public  hi  20 1 8, 1  have  learned  that 
on  or  about  Oetober  28,  2016,  “EC,  LLC  and/or  David  Dennison”  entered  into  a  “confidential 
settlement  agreement  and  mutual  release”  with  “Peggy  Peterson,”  pursuant  to  which  Peterson 
agreed  not  to  disclose  certain  “confidential  inforaiation  pertaining  to  Pennison]”  in  exchange  for 
$130,000.  The  agreement  provided  that  “EC,  LLC”  would  wire  the  fluids  to  “Peterson’s”  attorney, 
who  would  then  transfer  funds  to  “Peterson.”  Cohen  signed  the  agreement  on  behalf  of  EC, 
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LLC.”  The  agreement  stated  that  the  address  for  “EC,  LLC,”  which  was  later  refeired  to  in  the 
agi'eement  as  “Essential  Consultants,  LLC,”  was  Cohen’s  residence. 

e.  Consistent  with  the  “confidential  settlement  agreement  and  mutual  release,”  on  or 
about  November  1,  2016,  Davidson  transfeited  $96,645  from  his  attorney  client  frust  account  at 
City  National  Bank  to  a  bank  account  in  Clifford’s  name.  The  wire  had  the  annotation  “net 
settlement.”  On  the  same  day,  at  approximately  9:48  a.m.  Davidson  sent  Cohen  a  text  message 
with  a  picture  of  a  FedEx  delivery  confirmation,  stating  that  at  approximately  9:09  a.m.  a  package 
shipped  by  Davidson  the  previous  day  had  aiiived  for  Cohen  at  his  Trump  Organization 

'addressT^On  tlie  samenlayrat  approximatel5<^6:L4“p;mTrDavidson  senCGohen-an  email  with  an 

audio  file  attached  and  said  “Give  this  a  lesson  [sic]  and  then  call  me.  The  audio  attachment  was 
titled  “Stormy .mp3”  and  was  a  five-minute  recording  of  Davidson  interviewing  Clifford  about 
recent  public  allegations  made  by  an  adult  film  star  named  Jessica  Drake  regarding  her  alleged 
past  affair  with  Trump;  in  the  recording,  Clifford  explained  the  reasons  she  believed  that  Drake 
was  not  credible.  Less  than  an  hour  later,  at  approximately  7:05  p.m.,  Cohen  called  Trump,  but  it 
appears  that  they  did  not  connect.  Cohen  then  called  a  telephone  number  belonging  to  Kellyanne 
Conway,  who  at  the  time  was  Trump’s  campaign  manager.  They  did  not  connect.  At 
approximately  7:44  p.m.,  however,  Cohen  received  a  return  call  from  Conway,  which  lasted  for 
approximately  six  minutes. 

40.  On  November  4, 20 1 6,  just  thi-ee  days  after  the  Clifford  transaction  was  completed 
and  just  four  days  before  the  presidential  election,  the  Wall  Street  Journal  published  an  aiticle 
alleging  that  the  National  Enquirer  had  “Shielded  Donald  Tmmp”  from  allegations  by  Playboy 
model  Karen  McDougal  that  she  and  Trump  had  an  affair.  The  article  alleged  that  AMI  had  agreed 
to  pay  McDougal  to  bury  her  story.  McDougal,  like  Clifford,  had  been  represented  by  Davidson. 
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Based  on  my  review  of  toll  records,  infoimation  obtained  pursuant  to  the  Cohen  Email  Waixants 
and  iCloud  Warrant,  and  public  soui'ces,  it  appears  that  Cohen  spoke  frequently  to  Davidson, 
Howard,  Pecker,  and  Hicks  around  the  time  of  this  article’s  publication— just  days  before  Election 
Day — about  the  importance  of  preventing  the  McDougal  and  Clifford  stories  from  gaining  national 
fraction.  Specifically,  I  have  learned  the  following: 

a.  Between  4:30  and  8:00  p.m.  on  November  4,  Cohen  communicated  several  times 
with  Howard,  Pecker  and  Davidson.  For  instance,  at  approximately  4:49  p.m.,  Cohen  sent  Howard 
a  text  message  with  a  screenshot  of  an  email  forwarded  to  him  by  another  Trump  Organization 

lawyerr-The  forwarded  emaiTwas"fi-om  a  Wall  Street-JoumaFreporterrand  asked-for  comment 

fi'om  Tmmp  and/or  the  campaign  on  the  story.  Cohen  also  spoke  with  Hicks  several  times, 
including  shortly  before  and/or  after  calls  with  Pecker,  Howard  and  Davidson.  Indeed,  at 
approximately  7:33  p.m.,  using  two  different  cellphones  subscribed  to  him,  Cohen  appears  to  have 
been  talking  to  Davidson  and  Hicks  at  the  same  time. 

b.  At  approximately  8:51  p.m.,  Cohen  sent  Howard  a  message,  stating:  “She’s  being 
really  difficult  with  giving  Keith  a  statement.  Basically  went  into  hiding  and  um-eachable.”  One 
minute  later,  Howard  responded:  “I’ll  ask  him  again.  We  just  need  her  to  disappear.  Cohen 
responded,  “She  definitely  disappeared  but  refuses  to  give  a  statement  and  Keith  cannot  push  her. 
At  approximately  8:55  p.m.,  Howard  responded  to  Cohen’s  text:  “Let’s  let  the  dust  settle.  We  don  t 
want  to  push  her  over  the  edge .  She  ’  s  on  side  at  present  and  we  have  a  solid  position  and  a  plausible 
position  that  she  is  rightfully  employed  as  a  columnist.”  Based  on  my  involvement  in  this 
investigation,  I  believe  Cohen  and  Howard  were  referring  to  Karen  McDougal  when  they  were 
discussing  “she”  and  “her.”  Additionally,  I  believe  Howard’s  statement  that  “we  have  ...  a 
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plausible  position  that  she  is  rightfully  employed  as  a  columnist”  was  a  reference  to  the  fact  that 
AMI  had  given  McDougal  payments  for  her  role  as  a  purported  columnist  for  the  company. 

c.  At  approximately  8:58  p.m.  on  November  4,  2016,  Howai'd  attempted  to  reassure 
Cohen  about  the  effect  of  the  forthcoming  Wall  Street  Journal  article,  texting,  “I  think  it’ll  be  ok 
pal.  I  think  it’ll  fade  into  the  distance.”  Cohen  responded,  “He’s  pissed.”  Howard  wrote  back, 
‘Tm  pissed!  You’re  pissed.  Pecker  is  pissed.  Keith  is  pissed.  Not  much  we  can  do.”  Based  on 
my  involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  Trump  when  he  stated  he  s 
pissed.”  Cohen  asked  Howard  at  approxhnately  9:00  p.m.  how  the  Wall  Street  Journal  could 

publish  its  ai-ticleTf  “everyone  denies7”  Howard- responded7^‘‘Beeause-there  is-the  payment  from- 

AMI.  It  looks  suspicious  at  best.” 

d.  At  approxhnately  9:03  p.m.,  Hicks  called  Cohen  and  they  spoke  for  two  minutes. 
At  approximately  9:11  p.m.,  Cohen  called  Howard  and  spoke  to  him  for  five  minutes.  At 
approximately  9:15  p.m.,  Hicks  called  Cohen  and  they  spoke  for  nearly  seven  minutes.  Again, 
Cohen  used  different  phones  for  these  two  calls,  such  that  he  appears  to  have  been  on  both  calls 
for  about  a  minute  of  overlap.  At  approximately  9:32  p.m.,  Cohen  texted  Pecker,  “The  boss  just 
tried  calling  you.  Are  you  free?”  A  minute  later,  Cohen  texted  Howard,  “Is  there  a  way  to  find 
David  quickly?” 

e.  At  approximately  9:50  p.m.,  the  Wall  Street  Journal  article  was  published  online. 
Howard  and  Hicks  both  sent  web  links  for  the  article  to  Cohen.  Over  the  next  half  hour,  Cohen 
and  Howard  exchanged  several  text  messages  commenting  on  how  the  stoiy  came  across.  The  next 
morning  on  November  5, 2016,  at  approximately  7:35  a.m.,  Cohen  texted  Hicks,  So  far  I  see  only 
6  stories.  Getting  little  to  no  traction.”  Hicks  responded,  “Same.  Keep  praying!!  It’s  worldng!” 
Cohen  wrote  back,  “Even  CNN  not  talking  about  it.  No  one  believes  it  and  if  necessary,  I  have  a 
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statement  by  Storm  denying  everything  and  contradicting  the  other  pom  stars  statement.  I  wouldn’t 
use  it  now  or  even  discuss  with  him  as  no  one  is  talking  about  this  or  cares!”  Based  on  my 
involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  the  above-referenced  recorded 
audio  statement  by  Clifford  that  he  obtained  from  Davidson,  and  was  stating  that  such  a  statement 
could  be  used  to  influence  potential  negative  media  relating  to  Trump,  but  was  unnecessary  at  that 
time.  Based  on  a  text  message  from  Hicks  to  Cohen,  I  believe  that  later  that  morning.  Pecker 
spoke  to  Tmmp. 

41 .  On  or  about  November  8, 2016,  Trump  won  the  election  for  President  of  the  United 

"States.  ^ 

42.  On  or  about  January  12,  2018,  the  Wall  Street  Journal  first  reported  that  Cohen 
arranged  a  payment  to  Clifford.  On  or  about  January  22,  2018,  Common  Cause,  a  govermnent 
watchdog  group,  filed  a  complaint  with  the  Federal  Election  Commission,  alleging  that  Cohen  had 
violated  campaign  finance  laws  by  making  the  payment  to  Clifford.  Based  on  my  review  public 
sources  following  that  report,  as  well  as  emails  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
have  learned  the  following; 

a.  On  or  about  January  23,  2018,  the  day  after  Common  Cause  filed  its  complaint, 

Cohen  began  emailing  himself  drafts  of  statements  describing  his  payment  to  Clifford. 

Additionally,  on  January  23,  2018,  Cohen  emailed  the  following  draft  of  that  statement  to  an 

individual  who  appears  to  be  writing  a  book  on  Cohen’s  behalf: 

In  October  2016, 1  was  contacted  by  counsel  for  Ms.  Clifford  stating  that 
news  outlets,  including  ABC  news,  were  pm-suing  the  2011  story  of  an 
alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.  Despite  the  fact  that 
both  parties  had  already  denied  the  allegation,  as  Mr.  Trump’s  longtime 
special  counsel  and  protector,  I  took  it  upon  myself  to  match  the  offer  and 
keep  the  story  from  breaking.  I  Icnew  the  allegation  to  be  false,  h\Al  am 
also  a  realist  who  understands  that just  because  something  is  false  doesn  t 
mean  that  it  doesn ’t  create  harm  and  damage.  I  could  not  allow  this  to 
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occur.  I  negotiated  a  non-disclosure  agreement  with  Ms.  Clifford’s 
counsel  and  tendered  the  funds.  I  did  this  through  my  Delaware  LLC  and 
transferred  personal  funds  to  cover  the  agreement.  I  was  not  reimbursed 
any  monies  from  Mr.  Trump,  the  Trump  Organization,  any  third  party  or 
the  Presidential  campaign.  At  no  point  did  I  ever  advise  Mr.  Trump  of  my 
communications  or  actions  regarding  this  agreement.  As  outlandish  and 
unusual  as  this  may  appear,  the  Tmmps  have  been  like  family  to  me  for 
over  a  decade.  It’s  what  you  do  for  family. 

(Emphasis  added.)  Based  on  my  involvement  in  this  investigation,  I  believe  that  the  above  email 
is  an  acknowledgement  that  the  allegation  of  the  affair  had  existed  for  some  time  (  ...the  2011 
story. . .”),  but  that  Cohen  was  motivated  to  “keep  the  story  from  brealdng”  again  in  October  2016. 

b.  On  or  about  February  13,  2018,  Cohen  said  in  a  statement  to  The  New  York  Times 
that  “Neither  the  Trump  Organization  nor  the  Trump  campaign  was  a  party  to  the  transaction  with 
Ms.  Clifford.  The  payment  to  Ms.  Clifford  was  lawful,  and  was  not  a  campaign  contribution  or  a 
campaign  expenditure  by  anyone.”  Cohen  declined  to  answer  follow-up  questions  including 
whether  Trump  had  been  aware  of  the  payment,  why  Cohen  made  the  payment,  or  whether  similar 
payments  had  been  made  to  other  people. 

c.  On  or  about  February  14,  2018,  Cohen  was  asked  by  The  New  York  Times  whether 
Trump  had  reimbursed  hun,  whether  he  and  Trump  had  made  any  arrangement  at  the  time  of  the 
payment,  or  whether  he  had  made  payments  to  other  women.  Cohen  stated  in  response,  I  can  t 
get  into  any  of  that.”  On  or  about  February  14,  2018,  Cohen  also  stated  to  The  Washington  Post 
that:  “hi  a  private  transaction  in  2016,  I  used  my  own  personal  funds  to  facilitate  a  payment  of 
$130,000  to  Ms.  Stephanie  Clifford.  Neither  the  Trump  Organization  nor  the  Trump  campaign 
was  a  party  to  the  transaction  with  M^s.  Clifford,  and  neither  reimbursed  me  for  the  payment,  either 
directly  or  induectly.” 

43 .  On  or  about  March  9,2018,  Cohen  stated  to  ABC  News  that  “the  funds  were  taken 

from  my  home  equity  line  and  transferred  internally  to  my  LLC  account  in  the  same  bank.” 
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44.  Accordingly,  for  the  foregoing  reasons,  there  is  probable  cause  to  believe  that 
Cohen  committed  violations  of  the  Campaign  Finance  Offenses  by  maldng  an  in-kind  contribution 
to  Trump  or  the  Tramp  campaign  in  the  form  of  a  $130,000  payment  to  Clifford  on  the  eve  of  the 
election.  Indeed,  while  he  denies  having  given  an  unlawful  contribution,  in  his  own  statements 
Cohen  has  admitted  that  he  paid  $130,000  of  his  “personal  funds”  to  Clifford  and  that  the  payment 
occuiTed  less  than  two  weeks  before  the  election,  as  Trump  was  facing  negative  media  allegations 
about  his  behavior  toward  women,  even  tliough  allegations  of  an  affair  between  Trump  and 
Clifford  existed  since  2011.  In  addition,  the  communication  records  set  forth  above  make  evident 

tharCoheircommunrcated^with^inembers-oCthe-Truinp  cainpaign  about  his-negotiation  with 

Clifford’s  attorney  and  the  need  to  preclude  Clifford  from  making  a  statement  that  would  have 
reflected  negatively  on  the  candidate  in  advance  of  the  forthcoming  election. 

C.  Probable  Cause  Justifying  Search  of  the  Subject  Premises  aud  Subject  Devices 

45 .  Based  on  the  foregoing,  my  review  of  records  produced  pursuant  to  subpoenas  and 
the  Cohen  F.mail  Warrants,  and  the  iCloud  Warrant,  and  my  training  and  experience,  there  is 
probable  cause  to  believe  that  the  Subject  Premises  and  Subject  Devices  have  been  used  in 
firrtherance  of  the  Subject  Offenses  and  are  likely  to  contain  instrumentalities,  evidence,  and  fiiiits 
of  the  Subject  Offenses.  Specifically,  there  is  probable  cause  to  believe  that  Cohen  permanently 
resides  at  Subject  Premises-1  and,  at  least  in  part,  works  at  both  Subject  Premises-1  and  Subject 
Premises-2,  and  that  those  locations  contain  evidence  relating  to  the  Sterling  taxi  medallion 
transaction,  Cohen’s  assets,  Cohen’s  consulting  work  for  Essential  Consultants  LLC,  and  his 
payment  to  Clifford.  Additionally,  there  is  probable  cause  to  believe  that  Subject  Premises-3 
contains  evidence  of  Cohen’s  assets  and  his  payment  to  Clifford.  Finally,  there  is  probable  cause 
to  believe  that  Subject  Premises-4,  in  which  Cohen  is  temporarily  residing,  contains  electronic 
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devices,  including  Subject  Device-1  and  Subject  Device-2,  which,  in  turn,  contain  evidence  of  the 
Subject  Offenses,  such  as  evidence  relating  to  the  Sterling  taxi  medallion  transaction,  Cohen’s 
assets,  Cohen’s  consulting  work  for  Essential  Consultants  LLC,  and  his  payment  to  Clifford. 

46.  First,  there  is  probable  cause  to  believe  that  Cohen  lives  and  operates  his  businesses, 

at  least  in  part,  at  Subject  Premises-1 .  Specifically,  from  my  review  of  property  records,  I  know 
that  Michael  Cohen  and  Laura  Cohen  own  (in  trust)  Subject  Premises-1.  From  my  review  of 
Cohen’s  tax  returns,  I  know  he  lists  his  primary  residence  as  Subject  Premises-1.  Additionally, 
from  my  review  of  emails  produced  pursuant  to  the  Cohen  Email  Warrants,  I  know  that  Cohen 
routinely  ref^T6“SubjecfPrernises^r^  For  eXWplerofnJraboutSeptember28 

and  October  6,  2017,  Cohen  emailed  individuals  that  his  home  address  is  tlie  address  for  Subject 
Premises-1.  I  also  know  from  my  review  of  emails  that  Cohen  receives  package  delivery 
notifications  that  list  Cohen’s  address  as  the  address  for  Subject  Premises-1.  Cohen  has  also 
provided  the  address  of  Subject  Premises-1  as  the  address  for  Essential  Consultants  and  Michael 
D.  Cohen  &  Associates,  P.C.  For  example,  the  certificates  of  incorporation  and  account  opening 
documents  at  Ffrst  Republic  for  both  entities  list  their  addresses  as  the  address  for  Subject 
Premises-1.  See  supra  1 8(b),  1 8(d).  The  consulting  agi-eement  between  Essential  Consultants 
and  AT&T  also  indicated  the  address  for  Essential  Consultants  is  the  address  for  Subject  Premises- 
See  supra\\9(c). 

47.  There  is  also  probable  cause  to  believe  that  Subject  Premises-1  is  lilcely  to  contain 
instrumentalities,  evidence,  and  fruits  of  the  Subject  Offenses.  Specifically,  from  my  review  of 
emails  produced  pursuant  to  subpoena  and  the  Cohen  Email  Wari'ants  and  iCloud  Warrant,  as  well 
as  my  training  and  experience,  I  know  the  following: 
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a.  According  to  records  maintained  by  Sterling,  the  address  for  all  of  Cohen’s  taxi 
medallion  LLCs  is  the  address  for  Subject  Premises-1.  See  supra  t  16(c).  Additionally,  the 
medallion  loan  documents  indicate  that  any  mailings  related  to  the  loans  should  be  sent  to  Subject 
Premises- 1 .  See  id.  Based  on  my  training  and  experience,  as  well  as  my  review  of  public  soui'ces, 

I  know  that  individuals  keep  records  of  properties  and  assets  in  which  they  have  ownership 
interests.  Accordingly,  I  submit  that  Subject  Premises-1  lilcely  contains  evidence  of  Cohen’s 
ownership  of  the  taxi  medallion  LLCs,  the  revenue  that  those  medallions  generate,  and  the 
transaction  with  Sterling  in  20 1 4  to  re-fmance  the  medallion  loans  that  were  then  with  Capital  One 
Bank. 

b.  From  my  review  of  records  maintained  by  Sterling,  I  also  know  that  Sterling 

addressed  documents  relating  to  the^^^^^^^^Jtransaction  and  Cohen  s  attempts  to  modify  the 
terms  of  the  medallion  loans  to  Subject  Premises-1.  For  instance.  Sterling  addressed  the 
transaction  term  sheet,  see  supra  ^  1 6(1),  and  its  demand  letter  and  notice  of  default,  see  supra  T[ 
16(q),  to  Subject  Premises-1 .  Accordingly,  Subject  Premises-1  likely  contains  evidence 
concerning  the  transaction  and  Cohen’s  negotiations  with  Sterling.  Some  of  those 

records — such  as  records  relating  to  a  payment  fi-om  Cohen  to^^^^^^|-were  concealed  from 
Sterling  and  cannot  be  obtained  via  subpoena  to  Sterling.  Additionally,  even  where  documents 
were  sent  to  Cohen  by  Sterling  (and  therefore  are  available  from  Sterling  via  subpoena),  the  fact 
that  they  may  be  found  in  Subject  Premises-1  will  be  relevant  to  Cohen’s  possession  or  knowledge 
of  the  documents. 

c.  From  my  I'eview  of  records  maintamed  by  First  Republic,  I  loiow  that  Cohen 
provided  the  address  for  Subject  Premises-1  as  the  mailing  addi'esses  for  the  Essential  Consultants 
Account  and  MDC&A  Account.  See  supra  1 8(b),  1 8(e).  Accordingly,  it  is  likely  that  Subject 
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Premises- 1  contains  records  relating  to  the  Essential  Consultants  Account  and  MDC&A  Account, 
including,  among  other  things,  account  opening  documents,  bank  statements,  documents  provided 
as  part  of  the  know-your-customer  process,  any  notes  made  by  Cohen  when  he  was  opening  the 
accounts,  wire  transfer  records,  and  canceled  checks.  Even  where  these  records  can  be  obtained 
from  First  Republic,  the  fact  that  they  may  be  found  m  Subject  Premises- 1  will  be  relevant  to, 
among  other  things,  Cohen’s  ownership  of  the  accounts,  or  his  loiowledge  of  transactions  or  the 
existence  of  funds  in  accounts. 

d.  Based  on  my  review  of  records  maintained  by  Capital  One  Bank,  TD  Bank,  Morgan 

Staffle)^  Ci^MtiMal  Baidc,  Stgffatra*e~Bank,-and  Bethpage-Credit  UnionrFknow^  to 

provided  the  address  for  Subject  Premises- 1  as  the  mailing  for  his  accounts  at  each  of  these 
financial  institutions.  Accordingly,  it  is  likely  that  Subject  Premises-1  contains  records  relating  to 
these  accormts,  including,  among  other  things,  banlc  statements  that  list  account  balances.  The 
existence  of  these  records  in  Subject  Premises-1  will  be  relevant  to,  among  other  things,  Cohen  s 
ownership  of  the  accounts  and  his  Icnowledge  of  the  balances  in  these  accounts. 

e.  Additionally,  Cohen  may  have  records  of  other  bank  accounts  or  assets  that  were 
not  disclosed  to  Sterling  and  are  not  presently  Icnown  by  law  enforcement.  For  example,  as 
described  above,  Cohen  has  received  interest  income  smce  2015  that  he' has  not  disclosed  to 
Sterling  or  paid  taxes  on.  Also,  on  Cohen’s  August  2014  Financial  Statement,  ses  supra  ^  16(e), 
he  disclosed  $10,000,000  in  “investments  in  overseas  entities.”^®  The  value  of  these  investments 
was  omitted  from  subsequent  financial  statements.  However,  for  the  reasons  outlined  above,  there 
is  probable  cause  to  believe  that  Cohen  omitted  the  value  of  those  investments  from  his  201,7 

Based  on  my  participation. in  an  interview  with  Sterling  Employee-3,  I  have  learned  that 
Cohen  told  Sterling  Employee-3  that  the  reference  to  “investments  in  overseas  entities”  on  his 
2014  Financial  Statement  was  to  serve  merely  as  a  “placeholder”  for  potential  fixture  investments. 
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financial  statements  in  order  to  understate  his  assets.  As  Subject  Premises- 1  is  Cohen’s  primary 
residence  and  he  uses  Subject  Pi'emises-1  as  the  mailing  address  for  banlc  records,  there  is  probable 
cause  to  believe  that  account  statements  for  unknown  bank  accounts  or  assets  concealed  from 

Sterling  are  lilcely  to  be  found  in  Subject  Premises-1. 

f.  Based  on  my  review  of  records  maintained  by  AT&T  and  produced  pursuant  to  the 
Cohen  Email  Warrants,  I  loiow  that  the  address  Cohen  provided  to  AT &T  for  Essential  Consultants 
is  the  address  for  Subject  Premises-1.  See  supra  f  19(c).  Therefore,  there  is  probable  cause  to 
believe  that  Subject  Premises-1  will  contain  evidence  concerning  the  operation  of  Essential 
Consultants  or  money  that  CoHefr  fTceiWdTThi-ouglT^Essential  Consultantsr”from- AT&TT- 
Additionally,  because  Cohen  used  the  address  for  Subject  Premises-1  for  at  least  one  consulting 
arrangement  involving  Essential  Consultants,  there  is  probable  cause  to  believe  that  Subject 
Premises-1  may  contain  records  of  other  consulting  aiTangements  that  Cohen,  thi-ough  Essential 

Consultants,  has  with  other  individuals  or  entities. 

g.  Based  on  my  review  of  records  maintained  by  GetzeTs  accounting  firm,  and  emails 
produced  pui-suant  to  the  Cohen  Email  Warrants,  I  have  learned  that  GetzeTs  accounting  firm  sent 
documents  to  Subject  Premises-1  and  used  the  address  for  Subject  Premises-1  as  the  address  listed 
on  Cohen’s  personal  and  corporate  tax  retains.  See  supra  f  16(n).  For  instance,  on  or  about 
October  6,  2017,  an  employee  at  GetzeTs  accounting  firm  emailed  Cohen  that  she  had  sent 
Cohen’s  September  2017  Financial  Statement  by  FedEx  to  Cohen’s  attention.  Accordingly, 
Cohen’s  tax  records  are  likely  to  be  found  in  Subject  Premises-1. 

h.  Based  on  my  review  of  bank  records  and  publicly-available  documents,  I  know  that 
Cohen  used  $130,000  from  a  home  equity  line  of  credit  on  Subject  Premises-1  to  pay  Clifford.  I 
also  know  that  on  the  settlement  and  nondisclosure  agi-eement  between  “Peggy  Peterson”  and  EC, 

61 

2017.08.02 


Case  l:18-cr-00602-WHP  Document  48-2  Filed  07/18/19  Page  70  of  201 

LLC,”  the  address  for  Essential  Consultants  is  Subject  Premises- 1.  Accordingly,  Subject 
Premises- 1  is  lilcely  to  contain  evidence  of  the  Campaign  Finance  Offenses,  including  settlement 
and  nondisclosure  agreements,  payment  recoi'ds,  written  and  email  correspondence,  and  records 

pertaining  to  the  home  equity  line  of  credit. 

i.  Based  on  my  review  of  emails  produced  pui'suant  to  the  Cohen  Email  Wari'ants  and 
iCloud  Warrant,  I  know  that  Cohen  used  at  least  one  Apple  iPhone,  an  Apple  iPad  Mini,  and  a 
MacBookPro  to  access  his  iCloud  account.  Based  on  my  review  of  location  records  provided  by 
Apple  pursuant  to  the  iCloud  WaiTant,  I  know  that  electronic  devices  linked  to  Cohen’s  iCloud 

account  were  used^SubjecfPfemrs"es^l  tWWong  other  things7place  telephone  calls  an^^ 

files  to  Cohen’s  iCloud  account.  Accordingly,  there  is  probable  cause  to  believe  that  Subject 
Premises-1  contains  electronic  devices,  including  certain  Apple  products,  that  for  reasons 
discussed  below  are  likely  to  contain  evidence  of  the  Subject  Offenses. 

j.  Based  on  my  review  of  emails  produced  pursuant  to  the  Cohen  Email  Warrants,  I 
understand  that  Subject  Premises-1  recently  sustained  water  damage  to  certain  parts  of  the 
premises,  and  that  Cohen  has  engaged  confactors  to  perform  certain  remediation  work  on  the 
premises.  In  addition,  as  set  forth  above,  I  believe  that  Cohen  and  his  family  are  temporarily 
residing  at  Subject  Premises-4  in  the  Loew’s  Regency  Hotel,  which  is  approximately  two  blocks 
fi'om  Subject  Premises-1.  However,  based  on  my  review  of  a  work  order  sent  to  Cohen’s  email 
by  a  contractor,  I  understand  that  the  first  phase  of  the  work  order  called  for  the  contractor  to  “Pack 
&  Remove  all  items  &  fumisliings  in  Living  Room,  Kitchen,  Sons  Room  &  Dining  Room”  and 
store  them  off-site.  In  addition,  based  on  my  review  of  drawings  sent  to  Cohen  by  the  contractor, 
it  appears  that  the  work  is  primarily  being  done  in  these  rooms.  Thus,  I  believe  that  the 
construction  -  to  the  extent  it  is  still  ongoing  -  would  not  necessarily  have  caused  Cohen  to  move 
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all  documents  or  evidence  responsive  to  the  warrant  out  of  Subject  Premises-1,  because  it  does  not 
appear  that  work  is  being  done  to  the  portion  of  Subject  Premises-1,  such  as  a  home  office  or 
Cohen’s  own  room,  where  such  documents  or  evidence  would  most  lilcely  be  found.^^ 

48.  Second,  there  is  probable  cause  to  believe  that  Cohen  uses  Subject  Premises-2  as 
office  space,  and  also  that  Subject  Premises-2  contains  certain  electronic  devices.  Specifically, 
from  my  review  of  the  “strategic  alliance  agreement”  between  Squire  Patton  Boggs  and  Cohen, 
and  my  review  of  the  press  release  on  Squire  Patton  Boggs’s  website,  I  know  that  Cohen  has  an 
office  at  Subject  Premises-2.  See  supra  fl  18(d),  19(e).  Indeed,  I  have  learned  that  pursuant  to 

T!oh^’Fa^e^enf^ithrth^lWfinn,'he^has  “dedicated-and  segregated  office-space  in  Squire 

Patton  Boggs’s  offices  on  the  23rd  floor  of  30  Rockefeller  Plaza,  and  that  the  space  is  “physically 
sepai-ate”  fr'om  the  firm’s  offices  and  has  “locked  doors  and  its  own  locked  file  cabinets.”  See 
supra  T[  19(e).  Additionally,  I  know  that  under  the  terms  of  the  agreement,  Cohen  agreed  to 
“arrange  for  [his]  own  computer  seiwer  system  that  is  not  connected  to  [Squire  Patton  Boggs’s] 
computer  network  system.”  I  Icnow  from  my  paificipation  in  an  interview  with  Getzel,  who  met 
Cohen  at  Subject  Premises-2  in  2017,  that  Subject  Premises-2  is  an  office  with  a  door,  it  appeal's 
to  be  used  only  by  Cohen,  and  it  contains,  among  other  things,  a  computer  and  paper  files. 
According  to  Getzel,  when  Getzel  saw  Cohen  at  Subject  Premises-2,  he  had  two  cellular 
telephones  in  Subject  Premises-2.  I  also  Icnow  from  my  review  of  emails  produced  pursuant  to  the 
Cohen  Email  Warrants  that  Cohen  uses  the  address  for  Subject  Premises-2  in  the  signatoe  block 

As  noted  below,  based  on  my  training  and  experience,  I  believe  that  individuals  who  travel  or 
stay  in  hotels  for  short-term  periods  commonly  bring  some  items  with  them,  such  as  poi-toble 
electronic  devices  or  sensitive  items,  meaning  that  Cohen  has  likely  talcen  some  evidence  from 
Subject  Premises-1  to  Subject  Premises-4.  Nevertheless,  given  the  temporaiy  natoe  of  Cohen  s 
stay  at  Subject  Preniises-4  and  the  scope  of  the  work  being  done  at  Subject  Premises-1, 1  believe 
it  is  unlikely  that  Cohen  has  taken  all  evidence  that  would  be  subject  to  seizure  out  of  Subject 
Premises-1. 
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on  his  emails.  Based  on  my  review  of  notes  of  a  call  between  Cohen  and  First  Republic  Employee- 
2  (which  notes  were  taken  by  another  First  Republic  employee,  who  was  participating  in  the  call 
and  taking  notes),  I  Icnow  that,  on  or  about  November  15,  2017,  Cohen  told  First  Republic 
Employee-2  that  he  had  a  new  office  at  3  0  Rock.  Moreover,  I  know  from  an  article  in  Vanity  Fair 
published  on  or  about  February  14,  2018,  that  Cohen  was  interviewed  by  the  magazine  in  Subject 
Premises-2  in  or  about  February  2018, 

49.  There  is  also  probable  cause  to  believe  that  Subject  Premises-2  is  likely  to  contain 
insfrumentalities,  evidence,  and  fruits  of  the  Subject  Offenses.  Specifically,  fi-om  my  review  of 

eimils  producedjpifrsumifto^^^^  and  the^Cohen  EmaiTWarrantsand  iCloud  Warranfr  as  welT 

as  my  training  and  experience,  I  know  the  following: 

a.  According  to  records  maintained  by  Sterling,  when  Cohen  was  emailing  with 
Sterling  Employee-3  in  2018  about  a  modification  to  his  existing  loan  from  Sterling,  Cohen  listed 
his  address  in  his  email  as  the  address  for  Subject  Premises-2.  See  supra  f  16(t),  16(u). 
Accordingly,  Subject  Premises-2  likely  contains  evidence  concerning  Cohen’s  loan  modification 
negotiations  with  Sterling. 

b.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
know  that  the  address  Cohen  provided  to  KAI  and  BTA  for  Essential  Consultants  is  the  addi-ess 
for  Subject  Premises-2.  See  supra  HI  19(a),  19(b).  Therefore,  there  is  probable  cause  to  believe 
that  Subject  Premises-2  will  contain  evidence  concerning  the  operation  of  Essential  Consultants 
or  money  that  Cohen  received,  through  Essential  Consultants,  from  KAI  and  BTA,  among  other 
entities  with  which  Cohen  had  a  consulting  arrangement.  Additionally,  based  on  my  review  of 
emails  sent  in  2018  that  were  obtained  pnrsnant  to  the  Cohen  Email  Warrants,  I  know  that  Cohen 
continues  to  enter  into  consulting  aiTangements  through  Essential  Consultants,  and  agreements 
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relating  to  those  arrangements  indicate  that  Essential  Consultants  is  located  at  Subject  Premises- 
2.  Additionally,  because  Cohen  used  the  address  for  Subject  Premises-2  for  multiple  consulting 
arrangements  involving  Essential  Consultants,  there  is  probable  cause  to  believe  that  Subject 
Premises-2  may  contain  records  of  other  unlaiown  consulting  arrangements  that  Cohen  has  with 
other  individuals  or  entities. 

c.  Based  on  my  review  of  records  maintained  by  Getzel’s  accountmg  futn,  and  emails 
produced  pursuant  to  the  Cohen  Email  Wanunts,  as  well  as  my  participation  in  an  interview  with 
Gelzel,  I  have  learned  that  Getzel  visited  Subject  Premises-2  to  meet  with  Cohen  about  his  taxes. 

"S'ge"Si^fl  T[  20(a)rAt  that  meeting,' Getzel  discussed-with  Cohen  whether- Cohen  should  disclose- 

Essential  Consultants  on  his  personal  financial  statement  to  banks.  According,  there  is  probable 
cause  to  believe  that  Subject  Premises-2  will  contain  evidence  relating  to  Cohen’s  taxes,  or  notes 
of  his  conversation  with  Getzel.  Moreover,  the  fact  that  Cohen  used  Subject  Premises-2  for  a 
meeting  regarding  his  personal  financial  matters  provides  probable  cause  to  believe  that  documents 
and  information  regarding  his  finances  will  be  found  in  Subject  Premises-2. 

d.  Based  on  my  participation  in  an  interview  with  Getzel,  I  know  that  Cohen  maintains 
a  computer  in  Subject  Premises-2.  From  my  review  of  IP  data  produced  pursuant  to  a  subpoena 
and  pen  register  to  Google,  it  appeal's  that  Cohen  is  logging  into  his  Gmail  account  from  Subject 
Premises-2.  Accordingly,  there  is  probable  cause  to  believe  that  Subject  Premises-2  contains 
electronic  devices,  that  for  reasons  discussed  below  are  likely  to  contain  evidence  of  the  Subject 
Offenses. 

e.  Based  upon  my  training  and  experience,  I  have  learned  that  individuals  who 
maintain  businesses  typically  keep  records  relating  to  the  business — such  as  contracts  with  clients 
and  records  of  payments^ — at  the  busmess’  identified  location.  I  am  not  aware  of  any  addresses 
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associated  with  Essential  Consultants  other  than  Subject  Premises-1  and  Subject  Premises-2. 
Accordingly,  there  is  probable  cause  to  believe  that  Subject  Premises-1  and  Subject  Piemises-2 


will  contain  business  recoi'ds  for  Essential  Consultants. 

50.  Third,  there  is  probable  cause  to  believe  that  Subject  Premises-3  is  likely  to  contain 
instrumentalities,  evidence,  and  fruits  of  the  Subject  Offenses.  In  particular: 

a.  As  noted  above,  Cohen  has  two  bank  accounts  at  TD  Bank.  In  or  about  November 


20 1 7,  as  Cohen  was  receiving  substantial  income  from  consulting  work — which  he  did  not  disclose 
to  Sterling — Cohen  opened  the  safety  deposit  box  at  TD  Bank,  which  is  Subject  Premises-3.  In 

lighTofThe  aforementioned  evidence  tharCohen  conceals”assetsrm:cluding  assets  af-TD-Bank, 

there  is  probable  cause  to  believe  that  Subject  Premises-3  contains  financial  assets,  objects  of  value 
and/or  docmnents  relating  to  such  assets  or  objects  of  value  that  Cohen  likely  did  not  disclose  to 


Sterling.  Indeed,  based  on  my  fraining  and  experience,  I  am  aware  that  people  often  conceal 
valuable  items  in  safety  deposit  boxes.  Accordingly,  there  is  probable  cause  to  believe  that  Subject 


Premises-3  will  contain  evidence  of  the  Bank  Fraud  Offenses. 

b.  In  addition,  based  on  my  review  of  records  produced  by  TD  Bank,  I  know  that 
Cohen  has  accessed  the  vault  in  which  Subject  Premises-3  is  stored  on  two  occasions.  The  first 
such  occasion  was  on  November  10,  2017.  Cohen  signed  into  the  vault  at  approximately  5:35  and 
out  of  vault  at  approximately  5:39  on  that  date.^^  g^sed  on  my  review  of  toll  records,  I  loiow  that 
Cohen’s  first  call  after  he  signed  out  of  the  safety  deposit  box  -  approximately  45  minutes  later  - 
was  to  Keith  Davidson.  Specifically,  at  6:25  p.m.  Cohen  called  Davidson  and  they  spoke  for  less 
than  a  minute;  three  minutes  later,  Davidson  called  Cohen  back  and  they  spoke  for  approximately 


The  entry  in  the  bank’s  log  book  does  not  specify  whether  this  is  A.M.  or  P.M.  However,  I  infer 
that  it  is  P.M.,  because  it  is  unlikely  that  the  bank  would  have  been  open  at  5:35  and  5:39  a.m. 
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22  minutes.  The  second  such  occasion  was  on  Februaiy  2,  2018,  which  is  during  the  time  period 
numerous  media  reports  about  Cohen’s  payment  to  Clifford  were  being  published,  and  is  one  day 
after  it  appears  that  Cohen’s  family  moved  into  Subject  Premises-4,  as  set  forth  above.  The  timing 
of  Cohen’ s  two  visits  to  the  vault  -  one  shortly  before  a  call  to  Keith  Davidson  and  the  other  ai'ound 
the  time  that  Cohen  came  under  media  scrutiny  in  connection  with  the  payment  to  Davidson  s 
client-  gives  rise  to  probable  cause  to  believe  that  Subject  Premises-3  will  contain  evidence  of  the 
Campaign  Finance  Offenses,  such  as  documents  relevant  to  the  Cohen’s  dealing  with  Keith 
Davidson  and  the  payment  to  Clifford,  including  documents  or  evidence  that  Cohen  did  not  want 
to  leave  in  his  apartment  where  constmcfion  workers  would  be  presentr 

5 1 .  Based  on  my  review  of  emails  obtained  pursuant  to  the  Cohen  Email  Warrants  and 
cell  phone  location  information,  I  believe  that  Cohen  is  temporarily  residing  in  Subject  Premises- 
4.  See  supra  3(d).  There  is  also  probable  cause  to  believe  that  Subject  Premises-4  contains 
instrumentalities  and  evidence  of  the  Subject  Offenses,  including,  the  following. 

a.  As  described  above,  it  appears  that  Cohen  moved  to  Subject  Premises-4  on  or  about 
February  1,  2018,  at  which  time  numerous  media  reports  about  Cohen’s  involvement  in  the 
payment  to  Clifford  were  being  published.  See  supra  3(d).  During  this  time  same  period, 
Cohen  was  frequently  corresponding  with  the  media  and  sent  himself  and  others  statements  about 
his  involvement  in  the  payment  to  Clifford.  See  supra  42(a)-(c).  Thus,  there  is  probable  cause 
that  Cohen  took  at  least  some  documents  and  evidence  relating  to  the  Clifford  payment  wifti  him 
to  Subject  Premises-4,  in  order  to  reference  and  consult  them  in  connection  with  these  statements. 

33  As  noted  above.  Subject  Premises-3  is  approximately  five  inches  by  ten  inches.  Accordingly,  I 
do  not  believe  that  it  would  fit  a  large  volume  of  hard  copy  documents;  however,  a  sinall  number 
of  hard-copy  documents,  or  a  large  volume  of  documents  contained  on  a  flash  drive  or  other 
portable  storage  device,  would  fit  in  Subject  Premises-3. 
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b.  As  described  above,  at  the  time  Cohen  moved  to  Subject  Premises-4,  he  was  also 
in  the  midst  of  ongoing  negotiations  with  Sterling  regarding  the  refinancing  of  his  medallion  debts. 
For  example,  on  January  30, 201 8,  Cohen  had  a  lengthy  phone  call  with  Sterling  Employee-3  about 
his  finances  and  the  proposed  restructuring,  and  on  February  1,  2018,  Cohen  sent  an  email  to 
Sterling  Employee-3  claiming  that  he  did  not  have  more  than  $1.25  million  in  cash.  See  supra  Tl*! 
16(u).  Thus,  there  is  probable  cause  that  Cohen  took  at  least  some  documents  and  evidence  relating 
to  his  ongoing  negotiations  with  Sterling  with  him  to  Subject  Premises-4,  in  order  to  reference  and 
consult  them  in  connection  with  these  negotiations. 

c.  As  de^ibed^bove,  CbhetrusMWl^rone^Apple“iPhone7anT\T)pte  iPad'Mini, 


and  a  MacBook  Pro  to  access  his  iCloud  account,  and  these  electronic  devices  linked  to  Cohen’s 
iCloud  account  were  used  at  Subject  Premises- 1  —  Cohens’  permanent  residence  —  to  place 
telephone  calls  and  baclmp  files  to  Cohen’ s  iCloud  account.  See  supra  47(i).  Although  Cohen’s 
stay  at  Subject  Premises-4  is  temporary,  based  on  my  training  and  experience  I  know  that 
individuals  who  travel  or  stay  in  hotels  for  short-term  periods  commonly  bring  portable  electronic 
devices  with  them,  such  as  cellular  phones,  tablets,  or  laptops.  Accordmgly,  there  is  probable 
cause  to  believe  that  Subject  Premises-4,  where  Cohen  currently  appears  to  be  residing,  contams 


electronic  devices,  including  Subject  Device-1,  Subject  Device-2,  and/or  certain  Apple  products. 


that  for  the  reasons  discussed  herein  are  likely  to  contain  evidence  of  the  Subject  Offenses. 

d.  Moreover,  as  set  forth  above,  based  on  cellphone  location  information  I  know  that 
Subject  Device-1  and  Subject  Device-2  were  in  the  vicinity  of  Subject  Premises-4  as  recently  as 
this  morning  (April  8,  2018).  As  set  forth  above,  there  is  probable  cause  to  believe  that  Cohen 
used  the  Subject  Devices  in  furtherance  of  the  Subject  Offenses,  including  to  communicate  with 
Sterling  employees  regarding  the  medallion  transaction,  with  First  Republic  employees  regarding 
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the  Essential  Consultants  Account,  with  his  accountant  regai-ding  his  finances,  and  with 
individuals,  such  as  Davidson,  Howai'd  and  Pecker,  involved  in  the  $130,000  payment  to  Clifford. 

52.  Although  Cohen  appears  to  be  residing  currently  in  Subject  Premises-4,  it  is 
unloiown  whether  Cohen  will  be  physically  present  within  Subject  Premises-4  at  the  moment  the 
wan-ant  sought  herein  are  executed.  If  Cohen  is  within  Subject  Premises-4  at  that  moment.  Subject 
Device- 1  and  Subject  Device-2  -  his  cellphones  -  will  lUcely  also  be  within  Subject  Premises-4. 
If  Cohen  is  not  within  Subject  Premises-4  at  that  moment,  the  devices  will  lilcely  be  on  his  person, 
wherever  he  is  located  (which,  based  on  location  data  for  Subject  Device-1  and  Subject  Device-2 

as  recently ^sWdayri^liEely"to  b^in  the^Stmthem  District'ofNeW7York)r~As  such,  this  warrant- 

seelcs  separate  authority  to  seize  Subject  Device- 1  and  Subject  Device-2,  in  the  event  that  those 
devices  are  not  located  within  Subject  Premises-4  (or  another  Subject  Premises)  at  the  moment  the 
wan'ants  sought  herein  are  executed. 

D.  Probable  Cause  Justifying  Search  of  ESI 

53.  Based  on  the  foregoing,  there  is  probable  cause  to  believe  that  Subject  Premises-1, 

Subject  Premises-2  and  Subject  Premises-4  contain  electronic  devices  that  are  lilcely  to  contain 
evidence,  fruits,  and  instrumentalities  of  the  Subject  Offenses  (and,  as  set  forth  above,  that  Subject 
Device-1  and  Subject  Device-2  are  themselves  electronic  devices  that  are  likely  to  contain 
evidence  of  the  Subject  Offenses).  Specifically,  based  on  my  review  of  information  produced 
pursuant  to  the  Cohen  Email  Warrants,  the  iCloud  Warrant,  and  subpoenas,  as  well  as  pen  register 
data,  I  submit  tliat  there  is  probable  cause  that  Subject  Premises-1  contains  an  Apple  iPad  Mini,  a 
MacBook  Pro,  and  has,  at  various  tunes,  contained  Apple  cellphones;  similaify,  there  is  probable 
cause  that  Subject  Premises-2  contains  a  computer  and  has,  at  various  times,  contamed  Apple 
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cellphones.  These  devices  are  likely  to  include  evidence,  fruits,  and  instrumentalities  of  the 

Subject  Offenses  for  the  following  reasons: 

a.  As  described  throughout  this  affidavit,  Cohen  used  email  to  send  and  receive 
communications  related  to  the  Subject  Offenses.  In  particular,  Cohen  used  email  to  send  and 
receive  communications  with  Sterling,  First  Republic,  Getzel,  the  entities  to  which  he  is  pioviding 
consulting  services,  Davidson,  and  Howard,  among  others.  While  some  of  these  emails  have 
already  been  obtained  via  subpoenas  and  search  waiTants,  I  loiow  from  my  training  and  experience 
that  individuals  can  and  do  delete  emails  from  their  Internet-based  inboxes  but  retain  copies  of 

ThWWailsmtheir  hard  drivesT^I  also-know  that  mdividuals  oftemhave  multiple  email-accounts,- 

some  of  which  may  not  be  Icnown  to  law  enforcement,  and  as  a  result  electronic  devices  can  be  a 
unique  repositoiy  of  all  emails  relevant  to  certain  Subject  Offenses.  Indeed,  from  my  involvement 
in  this  investigation,  I  know  that  Cohen  had  an  email  account  with  the  Tmmp  Organization,  but 
the  USAO  and  FBI  have  not  been  able  to  obtain  the  contents  of  that  account  to  date.  Thus,  emails 
relevant  to  the  Subject  Offenses  are  likely  stored  on  electronic  devices  in  Subject  Premises-1, 

Subject  Premises-2  and/or  Subject  Premises-4. 

b.  Additionally,  Subject  Premises-1,  Subject  Premise-2  and  Subject  Premises-4  lilcely 
contain  electronic  copies  of  documents  relevant  to  the  Subject  Offenses.  Indeed,  I  know  from  my 
training  and  experience  that  individuals  often  retain  copies  of  important  documents  on  their 
computers  or  other  electronic  devices  capable  of  storing  information,  including  cellphones  (such 
as  the  Subject  Devices)  and  tablets.  Here,  there  are  a  number  of  documents  that  Cohen  has  likely 
retained  that  will  be  relevant  to  the  Subject  Offenses.  For  example,  elecfronic  devices  may  include 
documentation  of  Cohen’s  tme  net  worth,  a  listing  of  his  assets,  an  accounting  of  his  available 
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cash,  consulting  agreements  with  tliird  parties,  and  documentation  of  his  payment  to  Clifford, 

among  other  evidence  of  the  Subject  Offenses. 

c.  Third,  I  know  from  my  review  of  emails  obtained  pursuant  to  the  Cohen  Email 

Warrants  that  Cohen  sent  up  online  banking  with  First  Republic.  Based  on  my  training  and 
experience,  I  know  that  individuals  who  set  up  online  banldng  often  receive  electronic  notices 
concerning  financial  transactions  and,  on  occasion,  save  records  of  theh  financial  transactions  to 
then-  devices.  Accordingly,  there  is  probable  cause  to  believe  that  Cohen’s  electronic  devices 
contain  evidence  of  banking  activity,  including  the  existence  of  bank  accounts  or  assets  that  Cohen 

HidlioTdiMose  to  SfeflingW  MelfoseT  ' 

d.  Fourth,  from  my  review  of  records  produced  by  Apple,  I  know  that  Cohen 
communicates  using  text  message  as  well  as  encrypted  communications  applications.  These 
apphcations  that  Cohen  has  downloaded  onto  a  phone  include,  but  are  not  limited  to,  WhatsApp, 
Signal,  and  Dust.  I  know  from  my  review  of  toll  records  and  text  messages  that,  in  particular, 
Cohen  communicated  with  Pecker  using  these  encrypted  applications.  Accordingly,  there  is 
probable  cause  to  believe  that  Cohen’s  cellphones  -  the  Subject  Devices  -  will  contain  encrypted 
messages  that  are  not  otherwise  accessible  relating  to  the  Subject  Offenses. 

54.  Based  on  my  training  and  experience,  I  know  that  individuals  who  engage  in 
financial  crimes  commonly  use  computers  to  communicate  with  co-conspirators,  keep  financial 
ledgers,  and  retain  fi'audulent  documents.  As  a  result,  they  often  store  data  on  their  computers 
related  to  their  illegal  activity,  which  can  include  logs  of  online  or  cellphone-based  chats  with 
co-conspirators;  email  correspondence;  contact  information  of  co-conspirators,  including 
telephone  numbers,  email  addresses,  and  identifiers  for  instant  messaging  and  social  medial 
accounts;  bank  account  numbers;  and/or  records  of  uses  of  funds. 
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55.  Based  on  my  training  and  experience,  I  also  know  that,  where  computers  are  used 
in  furtherance  of  criminal  activity,  evidence  of  the  criminal  activity  can  often  be  found  months  or 
even  years  after  it  occuiTed.  This  is  typically  true  because: 

o  Electronic  fdes  can  be  stored  on  a  hai-d  drive  for  years  at  little  or  no  cost  and  users  thus 
have  little  incentive  to  delete  data  that  may  be  useful  to  consult  in  the  firture. 

•  Even  when  a  user  does  choose  to  delete  data,  the  data  can  often  be  recovered  months 
or  years  later  with  the  appropriate  forensic  tools.  When  a  file  is  deleted  on  a  home 
computer,  the  data  contained  in  the  file  does  not  actually  disappear,  but  instead  remains 
on  the  hard  drive,  in  “slack  space,”  until  it  is  overwritten  by  new  data  that  cannot  be 
stored  elsewhere  on  the  computer.  Similarly,  fries  that  have  been  viewed  on  the  Internet 
are  generally  downloaded  into  a  temporary  Internet  directory  or  “cache,”  which  is  only 
overwritten  as  the  “cache”  fills  up  and  is  replaced  with  more  recently  viewed  Internet 

pages.  Thus”,  the  ability  to  refiieve'ftom'  a  hard  drive  or  other  electronic^orage  media 

depends  less  on  when  the  file  was  created  or  viewed  than  on  a  particular  user’s 
operating  system,  storage  capacity,  and  computer  habits. 

o  In  the  event  that  a  user  changes  computers,  the  user  will  typically  transfer  files  firom 
the  old  computer  to  the  new  computer,  so  as  not  to  lose  data.  In  addition,  users  often 
keep  backups  of  their  data  on  electronic  storage  media  such  as  thumb  drives,  flash 
memory  cards,  CD-ROMs,  or  portable  hard  drives. 

56.  Based  on  the  foregoing,  I  respectfully  submit  there  is  probable  cause  to  believe  that 
Cohen  engaged  in  the  Subject  Offenses,  and  that  evidence  of  this  criminal  activity  is  likely  to  be 
found  in  the  Subject  Premises,  on  computers  and  electronic  media  found  in  the  Subject  Premises, 
and  on  the  Subject  Devices.  In  particular,  there  is  probable  cause  to  believe  that  the  Subject 
Premises  and  Subject  Devices  will  contain  evidence,  fioiits,  and  instrumentalities  of  violations  of 
the  Subject  Offenses,  as  more  fully  described  in  Sectiop  II  of  Attachments  A,  B,  C,  D,  E  and  F  to 

the  proposed  warrants,  including  the  following: 

a.  Evidence  necessary  to  establish  the  occupancy  or  ownership  of  the  Subject 
Premises,  including  without  limitation,  utility  and  telephone  bills,  mail  envelopes,  addressed 
cori'espondence,  bank  statements,  identification  documents,  and  keys. 

b.  Evidence  relating  to  Sterling,  Melrose,  and/or  taxi  medallions. 
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c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Cohen  and/or  entities 
associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 


liabilities,  to  others,  including  tcl 


land/or  entities  associated  with  him. 


d.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 


with  Sterling  and/or  Melrose. 

e.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
mdicate  the  natare  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  coimection  with  Essential  Consultants. 

f.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  natui'e  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 

g.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  banlc  records. 

h.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

Cohen  and^^^^^^^^^^md  by  Cohen. 

i.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Kai'en  McDougal,  or  then 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

j.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 
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k.  Evidence  of  conununications  involving  Michael  Cohen,  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Tmmp  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

l.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Tramp  Campaign. 

m.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Tramp  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Tramp’s  relationship  in  the  ran  up  to  the  election. 

— - nT'E’iddMceTelatin^to  any  reimbursemen1ror-other  promises-made-to-Cohen-for 

payment  to  Clifford  or  others  in  connection  with  the  election. 

o.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

p.  Communications  with  othei's,  including  JefiErey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  banlc  accounts,  taxes,  debts,  and/or  finances; 

q.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  som-ce  of  fimds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution; 

r.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

TTT.  Procedures  for  Searching  ESI 
A.  Execution  of  Warrant  for  ESI 

57.  Federal  Rule  of  Criminal  Procedure  4 1  (e)(2)(B)  provides  that  a  warrant  to  search 

for  and  seize  property  “may  authorize  the  seizure  of  electronic  storage  media  or  the  seizm-e  or 
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copying  of  electronically  stored  itifonnation  ...  for  later  review.”  Consistent  with  Rule  41,  this 
application  requests  authorization  to  seize  any  computer  devices  and  storage  media  and  transport 
them  to  an  appropriate  law  enforcement  facility  for  review.  This  is  typically  necessary  for  a  number 
of  reasons; 


o  First,  the  volume  of  data  on  computer  devices  and  storage  media  is  often  impractical 
for  law  enforcement  personnel  to  review  in  its  entirety  at  the  search  location. 

9  Second,  because  computer  data  is  particularly  vulnerable  to  inadvertent  or  intentional 
modification  or  destruction,  computer  devices  are  ideally  examined  in  a  conftolled 
environment,  such  as  a  law  enforcement  laboratory,  where  trained  personnel,  using 
specialized  software,  can  make  a  forensic  copy  of  the  storage  media  that  can  be 
subsequently  reviewed  in  a  manner  that  does  not  change  the  underlying  data. 

•  Thhd,  there  are  so  many  types  of  computer  hardware  and  software  in  use  today  that  it 
can  be  impossible  to  bring  to  the  search  site  all  of  the  necessary  technical  manuals  and 
specialized  personnel  and  equipment  potentially  required  to  safely  access  the 
underlying  computer  data. 

•  Fourth,  many  factors  can  complicate  and  prolong  recovery  of  data  fiorn  a  computer 
dewce,  including  the  increasingly  common  use  of  passwords,  encryption,  or  other- 
features  or  configurations  designed  to  protect  or  conceal  data  on  the  computer,  which 
often  take  considerable  tune  and  resources  for  forensic  personnel  to  detect  and  resolve. 

58.  As  discussed  herein,  Squire  Patton  Boggs  is  a  ftinctioning  law  finn  that  conducts 
legitimate  business  umnlated  to  Cohen’s  commission  of  the  Subject  Offenses.  Subject  Premises- 
2  is  an  office  located  inside  of  Squire  Patton  Boggs’s  New  York  office.  In  order  to  execute  the 
warrant  in  the  most  reasonable  fashion,  law  enforcement  personnel  will  attempt  to  investrgate  on 
the  scene  of  what  computers  or  storage  media,  if  any,  must  be  seized  or  copied,  and  what  computers 
or  storage  media  need  not  be  seized  or  copied.  Law  enforcement  personnel  will  speak  with  Squire 
Patton  Boggs  personnel  on  the  scene  as  may  be  appropriate  to  determine  which  files  and  electronic 
devices  within  Subject  Premises-2  belong  to  or  were  used  by  Cohen.  While,  based  on  the 
foregoing,  it  does  not  appear  that  Cohen  shared  electronic  devices  or  a  server  with  Squire  Patton 
Boggs,  where  appropriate,  law  enfoi'cement  personnel  will  copy  data,  rather  than  physically  seize 
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computers,  to  reduce  the  extent  of  any  disruption  of  Squire  Patton  Boggs’s  operations.  If,  after 
inspecting  the  seized  computers  off-site,  it  is  determined  that  some  or  all  of  this  equipment  is  no 
longer  necessary  to  retrieve  and  preserve  the  evidence,  the  Government  will  return  it. 

59.  Additionally,  because  Cohen  is  an  attorney,  and  claims  to  serve  as  a  personal 
attorney  for  Trump,  the  review  of  evidence  seized  from  the  Subject  Premises  and  Subject  Devices 
will  be  conducted  pursuant  to  established  screening  procedures  to  ensure  that  the  law  enforcement 
personnel  involved  in  the  investigation,  including  attorneys  for  the  Government,  collect  evidence 
in  a  manner  reasonably  designed  to  protect  any  attorney-client  or  other  applicable  privilege.  When 

■^^^ih^ateTffiilnocedurbfrwirihcludeuseofafresign^ 

the  investigative  team,  in  order  to  review  potentially  privileged  communications  and  determine 
which  communications  to  release  to  the  investigation  and  prosecution  team. 

B.  Accessing  ESI  on  the  Subj  ect  Devices 

60.  As  described  above,  the  Subject  Devices  are  both  Apple  brand  devices. 

61.  I  know  fr'om  my  training  and  experience,  as  well  as  from  information  found  in 
publicly  available  materials  including  those  published  by  Apple,  that  some  models  of  Apple 
devices  such  as  iPhones  and  iPads  offer  their  users  the  ability  to  unlock  the  device  via  the  use  of  a 
fingerprint  or  thumbprint  (collectively,  “fmgerprmt”)  in  lieu  of  a  numeric  or  alphanumeric 
passcode  or  password.  This  feature  is  called  Touch  ID.  I  also  loiow  that  the  Apple  iPhone  X  offers 
its  users  the  ability  to  unlock  the  device  via  the  use  of  facial  recognition  (through  infrared  and 
visible-  light  scans)  in  lieu  of  a  numeric  or  alphanumeric  passcode  or  password.  This  feature  is 
called  Face  ID. 

62.  If  a  user  enables  Touch  ID  on  a  given  Apple  device,  he  or  she  can  register  up  to  5 
fingerprints  that  can  be  used  to  unlock  that  device.  The  user  can  then  use  any  of  the  registered 
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fingerprints  to  unlock  the  device  by  pressing  the  relevant  finger(s)  to  the  device  s  Touch  ID  sensor, 
which  is  found  in  the  round  button  (often  referred  to  as  the  “home”  button)  found  at  the  bottom 
center  of  the  front  of  the  device.  If  a  user  enables  Face  ID  on  a  given  Apple  device,  he  or  she  can 
unlock  the  device  by  raising  the  iPhone  to  his  or  her  face,  or  tapping  the  screen.  In  my  tiaining 
and  experience,  users  of  Apple  devices  that  offer  Touch  ID  or  Face  ID  often  enable  it  because  it  is 
considered  to  be  a  more  convenient  way  to  unlock  the  device  than  by  entering  a  numeric  or 
alphanumeric  passcode  or  password,  as  well  as  a  more  secure  way  to  protect  the  device  s  contents. 

63.  In  some  circumstances,  Touch  ID  or  Face  ID  cannot  be  used  to  unlock  a  device  that 
has  either  security  feature  enable,  and  a  passcode^or^password^mustrbe  used  instead.  These 
circumstances  include;  (1)  when  the  device  has  just  been  turned  on  oi  lestarted,  (2)  when  moie 
than  48  hours  has  passed  since  the  last  time  the  device  was  unlocked;  (3)  when  the  passcode  or 
password  has  not  been  entered  in  the  last  6  days,  and  the  device  has  not  been  unlocked  via  Touch 
ID  in  the  last  8  hours  or  the  device  has  not  been  unlocked  via  Face  ID  in  the  last  4  hours;  (4)  the 
device  has  received  a  remote  lock  command;  or  (5)  five  unsuccessful  attempts  to  unlock  the  device 
via  Touch  ID  or  Face  ID  are  made. 

64.  The  passcodes  or  passwords  that  would  unlock  the  Subject  Devices  ai-e  not  known 
to  law  enfijrcement.  Thus,  it  will  likely  be  necessary  to  press  the  fingeis  of  the  user  of  the  Subject 
Devices  to  the  devices’  Touch  ID  sensor,  or  hold  the  Subject  Devices  in  front  of  the  user’s  face  to 
activate  the  Face  ID  sensor,  in  an  attempt  to  unlock  the  devices  for  the  purpose  of  executing  the 
seai'ch  authorized  by  this  wan'ant.  Attempting  to  unlock  the  relevant  Apple  devices  via  Touch  ID 
with  the  use  of  the  fingerprints  of  the  user,  or  via  Face  ID  by  holding  the  device  in  front  of  the 
user’s  face,  is  necessary  because  the  government  may  not  otheiwise  be  able  to  access  the  data 
contained  on  those  devices  for  the  puipose  of  executing  the  seai'ch  authorized  by  this  warrant. 
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65.  Based  on  these  facts  and  my  training  and  experience,  it  is  likely  that  Cohen  is  the 
user  of  the  Subject  Devices,  and  thus  that  his  fingei-prints  ai-e  among  those  that  are  able  to  unlock 
the  Subject  Devices  via  Touch  ID  or  his  face  is  able  to  unlock  tire  Subject  Devices  via  Face  ID. 

66.  Although  I  do  not  know  which  of  a  given  user’s  10  fingerprints  is  capable  of 
unlocking  a  particular  device,  based  on  my  training  and  experience  I  know  that  it  is  common  foi  a 
user  to  unlock  a  Touch  ED-enabled  Apple  device  via  the  fingerprints  on  thumbs  or  index  fingers. 
In  the  event  that  law  enforcement  is  unable  to  unlock  the  Subject  Devices  as  described  above 
within  the  five  attempts  permitted  by  Touch  ID,  this  will  simply  result  in  the  device  requiring  the 
entry  of  a  password  or  passcode  b^Tore  it  can  be  rmlocked. 

67.  I  also  know  fi-om  my  fiaining  and  experience,  and  my  review  of  publicly  available 
materials  pubUshed  by  Apple  that  Apple  brand  devices,  such  as  the  Subject  Devices,  have  a  feature 
that  allows  a  user  to  erase  the  contents  of  the  device  remotely.  By  logging  into  the  Internet,  the 
user  or  any  other  individual  who  possesses  the  user’s  account  information  can  take  steps  to 
completely  wipe  the  contents  of  the  device,  thereby  destroying  evidence  of  criminal  conduct,  along 
with  any  other  information  on  the  device.  The  only  means  to  prevent  this  action  is  to  disable  the 
device’s  ability  to  connect  to  the  Internet  immediately  upon  seizure,  which  requires  either  access 
to  the  device  itself  to  alter  the  settings,  or  the  use  of  specialized  equipment  that  is  not  consistently 

available  to  law  enforcement  agents  at  every  arrest. 

68.  Due  to  the  foregoing,  I  request  that  the  Court  authorize  law  enforcement  to  press 
the  fingers  (including  thumbs)  of  Cohen  to  the  Touch  ID  sensors  the  Subject  Devices,  or  hold  the 
Subject  Devices  in  fi-ont  of  Cohen’s  face,  for  the  purpose  of  attempting  to  unlock  the  Subject 
Devices  via  Touch  ID  or  Face  ID  in  order  to  search  the  contents  as  authorized  by  this  warrant. 
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C.  Review  of  ESI 

69.  Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation 
of  forensic  image  copies,  law  enforcement  personnel  (including,  in  addition  to  law  enforcement 
officers  and  agents,  and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and 
related  proceedings,  attorneys  for  the  govermnent,  attorney  support  staff,  agency  personnel 
assisting  the  government  in  this  investigation,  and  outside  technical  experts  under  government 
eontrol)  will  review  the  ESI  eontained  therein  for  infonnation  responsive  to  the  warrant. 

70.  In  conducting  this  review,  law  enforcement  personnel  may  use  various  teehniques 

“tdffietejncmn^whiclrfiles  or  other  ESEcontain  evidence  or-fiTiits  of  the  -SubjeefQfFenses7--Sueh- 

teehniques  may  include,  for  example: 

•  surveying  directories  or  folders  and  the  individual  files  they  eontain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

•  eonducting  a  file-by-file  review  by  “opening”  or  reading  the  first  few  “pages”  of  sueh 
files  in  order  to  determine  their  precise  contents  (analogous  to  perfoiming  a  eursory 
examination  of  each  document  in  a  file  cabinet  to  determine  its  relevance), 

•  “scanning”  storage  areas  to  discover  and  possibly  recover  recently  deleted  data  or 
deliberately  hidden  files;  and 

•  perfoiming  electronic  keyword  searches  through  all  electronic  storage  ai'eas  to 
determine  the  existence  and  location  of  data  potentially  related  to  the  subjeet  matter  of 
the  investigation^'*;  and 

•  reviewing  metadata,  system  information,  configuration  files,  legistry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 


Keyword  searches  alone  ai'e  typically  inadequate  to  deteet  all  relevant  data.  For  one  thing, 
keyword  searches  work  only  for  text  data,  yet  many  types  of  files,  such  as  images  and  videos,  do 
not  store  data  as  searchable  text.  Moreover,  even  as  to  text  data,  there  may  be  information  piopeily 
subject  to  seizure  but  that  is  not  captured  by  a  keyword  search  because  the  information  does  not 
eontain  the  keywords  being  searched. 
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71.  Law  enforcement  personnel  will  make  reasonable  efforts  to  restrict  their  search  to 
data  falling  within  the  categories  of  evidence  specified  in  the  warrant.  Depending  on  the 
chcumstances,  however,  law  enforcement  personnel  may  need  to  conduct  a  complete  review  of  all 
the  ESI  from  seized  devices  or  storage  media  to  evaluate  its  contents  and  to  locate  all  data 
responsive  to  the  warrant. 

D.  Return  of  ESI 

72.  ,  If  the  Govermnent  detennines  that  the  electronic  devices  are  no  longer  necessaiy 
to  retrieve  and  preserve  the  data,  and  the  devices  themselves  are  not  subject  to  seizui'e  pursuant  to 

■FederalRule^of  eriminaLProcedure  41  (c)7  the  Government  will  retum-these  items^rupon-requestr- 

Computer  data  that  is  encrypted  or  um'eadable  will  not  be  returned  unless  law  enforcement 
persormel  have  determined  that  the  data  is  not  (i)  an  instmmentality  of  the  offense,  (ii)  a  fruit  of 
the  criminal  activity,  (iii)  contraband,  (iv)  otherwise  unlawfully  possessed,  or  (v)  evidence  of  the 
Subject  Offenses. 
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AO  93  (SDNY  Rev.  05/10)  Search  and  Seizure  Warrant  


United  States  District  Court 

•  for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of 

(Briefly  describe  the  property*  to  be  searched 
or  identify  the  person  by  name  and  address) 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1728, 

New  York,  New  York  1 0065,  and  any  closed 
containers/items  contained  therein,  See  Attachment  D 

SEARCH  AND  SEIZURE  WARRANT 

To:  '  Any  authorized  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  goyeronient  requests  the  search  . 

of  the  following  person  or  property  located  in  the  _ Southern  Distiict  of  _ New  York _ 

(identic*  the  person  or  describe  the  property  to  be  searched  and  give  its  location)', 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1728,  New  York,  New  York  10065,  and  any  closed  containers/items 
contained  therein,  See  Attachment  D 

The  person  or  property  to  be  seai'ched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)'. 

See  Attachment  D 


) 

) 

)  Case  No, 

) 

) 

) 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  estabhsh  probable  cause  to  search  and  seize  the  person  or 


property. 


YOU  ARE  COMMANDED  to  execute  this  wairant  on  or  before 


(not  to  exceed  14  days) 

gf  in  the  daytime  6:00  a.m.  to  10  p.m.  □  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

established. 


Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  exeeution  of  the  Warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  of  the  Court. 

Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Court. _ 

- - - -  USMJlmtials 


O  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  autlrorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 

searched  or  seized  (check  the  appropriate  box)  Dfor  _ days  (not  to  exceed  30). 

□until,  the  facts  justifying,  the  later  specific  date  of 


Date  and  time  issued: 


Judge  *s  signature 


City  and  state:  New  York.  NY _  _ Hon.  Henrv  B.  Pitman,  U.S.  Magistrate  Judge 

Printed  name  and  title 
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AO  93  (Rev,  01/09)  Search  and  Seizure 

warrant  (^ir'agez; 

Return 

Case  No.: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

.. 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 


Certification 


I  declare  under  penalty  of  peijury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Couit. 


Executing  officer  *s  signature 


Printed  name  and  title 
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ATTACB3VIENT  D 

L  Premises  to  be  Searched—SubjectPremisesA 

The  premises  to  be  searched  (“Subject  Premises-4”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein; 

Room  1728  located  inside  the  Loews  Regency  Hotel  at  540  Park  Avenue,  New  York,  New 
York  10065.  The  building  is  a  luxury  hotel  located  on  Park  Avenue  and  61st  Street.  Subject 
Premises-4  is  located  on  the  17th  floor  of  the  hotel. 


n.  Items  to  Be  Seized 

A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

_ _ Tlip;dtftm.»^-to-be-seized-from  Subject  Premisesr4„  are, evidence^ AJjte)  and  instrumentalities__ 

of  violations  of  18  U.S.C.  §§  371  (consphacy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  banlc  entries),'  1014  (false  statements  to  a  fmancial  institution),  1343  (wire  fraud),  and  1344 
(banlc  ffaud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (iUegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows; 

'  a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 

medallions,  ftom  January  1, 2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 

entities  associated  with  him  to  traTgfeyn^ntgesUn  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  coimection  with  Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D,  Cohen  &  Associates, 
or  evidence  of  the  pmpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates.  • 

f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  aimual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  banlc  records,  from  January  1, 
20 1 3  to  the  present. 

^jRvjdmic^rel^n^^^aEreMn^s,  loans,  and/or  financial 

Cohen 
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and  any  payments  by  Cohen,  h:om  anuary 

1, 2012  to  the  present 

h.  Evidence  relating  to  payments  to  Stephame  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agi'eements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Tmmp,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

Ic.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Tmmp  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  banlc  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 

p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  aii  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  accoxmt;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  fiom  Subject  Premises-4  also  include  any  cornputer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  n.A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  Pro, 
any  other  desktop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mni,  portable  hard  driv^,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Pxemises-4  also  include: 

1  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media;  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similai’  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  formation 
concerning  the  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. 

3 .  Any  evidence  concerning  the  identities  or  locations  of  those  persons  wth  access  to, 

^controlTJver,fsrownership  of  the  seizedmr  copiedcomputer  deviees-or-storage  media.^ 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example. 

•  sui-veying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looldng  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

•  opening  or  cm'soiily  reading  the  fii'st  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

•  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

•  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configui-ation  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
II.A  and  n.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  tiom  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additiondly,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedui-es  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  sepai’ate  and  apart  from  the  investigative  team,  in  order  to 
address  potential  privileges . 
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TO  BE  FILED  UNDER  SEAL 

Agent  Affidavit  in  Support  of 
Application  for  Search  and  Seizure 

Warrant 


oTJnvestigatiQn,  _being  diily.:SWQm,_^ 

deposes  and  says: 

1.  Introduction 
A.,  Affiant 

1 .  I  am  a  Special  Agent  with  the  Federal  Bureau  of  Investigation  (“FBI”).  I  have  been 
a  Special  Agent  with  the  FBI  since  2009.  In  the  course  of  my  experience  and  training  in  these 
positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a  wide  array 
of  financial  crimes,  including  frauds  on  financial  institutions,  as  well  as  into  offenses  involving 
public  corruption.  I  also  have  training  and  experience  executing  search  warrants,  including  those 
involving  electronic  evidence. 

2.  On  or  about  April  8,  2018,  the  Honorable  Henry  B.  Pitman,  United  States 
Magistrate  Judge,  issued  a  search  and  seizure  warrant  for  the  premises  known  and  described  as 
Loews  Regency  Hotel,  540  Park  Avenue,  Room  1728,  New  York,  New  York  10065,  and  Any 
Closed  Containers/Items  Contained  Therein.  The  warrant  and  my  supporting  affidavit  (the 
“Affidavit”)  are  appended  hereto.  The  Affidavit  is  incorporated  herein  by  reference  in  its  entirety 
as  Exhibit  A. 
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SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  the  Application  of  the  United 
States  of  America  for  a  Search  and  Seizure 
Warrant  for  the  Premises  Known  and  Described 
as  Loews  Regency  Hotel,  540  Park  Avenue, 
Room  1628,  a  Suite  that  Encompasses  Rooms 
1628,  1629,  and  1630  New  York,  New  York 
10065,  and  Any  Closed  Containers/Items 
Contained  Therein 
Reference  No.  20 1 8R00 1 27 
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3 .  On  or  about  April  9,2018,  based  upon  a  conversation  with  another  law  enforcement 
agent  who  spoke  to  an  employee  of  Loews  Regency  Hotel,  I  learned  that  Michael  Cohen  is  in  fact 
staying  in  Room  1628  (in  a  suite  encompassing  rooms  1628, 1629,  and  1630)  (collectively,  “Room 
1628”),  not  Room  1728.  Accordingly,  I  respectfully  submit  the  attached  amended  warrant 
pursuant  to  Rule  41  of  the  Federal  Rules  of  Criminal  Procedure  for  the  following  Subject  Premises; 
Loews  Regency  Hotel,  540  Park  Avenue,  Room  1628,  New  York,  New  York  10065,  and  Any 
Closed  Containers/Items  Contained  Therein  (“Subject  Premises-4”).  For  the  reasons  detailed  in 
the  Affidavit  and  herein,  I  believe  that  there  is  probable  cause  to  believe  that  Subject  Premises-4 
contains  evidence,  fruits,  and  instrumentalities  of  violations  of  18  U.S.C.  §§  1005  (false  bank 

entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344  (bank  fraud) 
(collectively,  the  “Bank  Fraud  Offenses”),  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l) 
(illegal  campaign  contributions)  (the  “Campaign  Finance  Offenses”),  and  18  U.S.C.  §§  371 
(conspiracy  as  it  pertains  to  the  other  Subject  Offenses)  (collectively,  the  “Subject  Offenses”). 

4.  Based  on  the  foregoing,  I  respectfully  request  the  court  to  issue  a  warrant  to  seize 
the  items  and  information  specified  in  Attachment  A  to  this  affidavit  and  to  the  Search  and  Seizure 
Warrant. 
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5.  In  light  of  the  confidential  nature  of  the  continuing  investigation,  I  respectfully 
request  that  this  affidavit  and  all  papers  submitted  herewith  be  maintained  under  seal  until  the 


Court  orders  otherwise. 


Special  Agent 
FBI 


Sworn  to  before  me  on 
9th  day  of  April,  2018 


UU\ 


HOl^.  HENRY  B.  ^ITMAN 

UNITED  STATES  MAGISTRATE  JUDGE 
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ATTACHMENT  A 

I.  Premises  to  be  Searched — Subject  Premises-4 

The  premises  to  be  searched  (“Subject  Premises-4”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein; 

Room  1628  (a  suite  encompassing  rooms  1628,  1629,  and  1630)  (collectively,  “Room 
1628”),  located  inside  the  Loews  Regency  Hotel  at  540  Park  Avenue,  New  York,  New  York 
10065.  The  building  is  a  luxury  hotel  located  on  Park  Avenue  and  61st  Street.  Subject  Premises- 
4  is  located  on  the  1 6th  floor  of  the  hotel. 

XL  Items  to  Be  Seized 

A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The^iteths  to  be  seizedlfQm~^Su5jecLPl^ises  are  evidence,  fruits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fi'aud),  and  1344 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1, 2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  trangfei^n^nterest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  ^^^^^^^^|md/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 

f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
2013  to  the  present. 

g.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

Cohen  and  by 
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and  any  payments  byl 


Ito  Cohen,  from  January 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

- —k,— Evidence  relating -to  Cohen’s  role  in  the  -Tmmp  Campaign^  and  coordinatiomor— 

consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  inyolving  Trump’s  relationship  in  the  mn  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Coheii  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-4  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  II.A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  Pro, 
any  other  desktop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-4  also  include:  ’ 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  information 
concerning  the  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. 

3.  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media.  _  _  _  _  _ 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

»  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

•  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

•  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

®  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

®  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
II.  A  and  II.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to 
address  potential  privileges. 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  the  Application  of  the  United  ; 
States  of  America  for  a  Search  and  Seizme  : 
Warrant  for  the  Premises  Known  and  Described  ; 


New 


as  (1)  502  Park  Avenue,! 

York,  New  York  10022,  (2)  Michael  Cohen’s  : 
Office  at  30  Rockefeller  Plaza,  23rd  Floor,  New  i 
York,  New  York  10112,  (3)  Safe  Deposit  Box  #  ; 
^■Located  at  the  TD  Banlc  Branch  at  500  Park  : 
Avenue,  New  York,  New  York  10019,  and  (4)  ; 
Loews  Regency  Hotel,  540  Park  Avenue,  Room  ; 
1728,  New  York,  New  York  10065,  and  Any  ; 
Closed-Containers/[tems_Contained  Therein, 


the  Electronic  Devices  Known  and  Descril^^^^ 
^^M^nple  iPhone  with  Phone  Numbei^^H 
^i^^^and  (2)  an  Apple  iPhone  with  Phone 

Number^^^^^^^m 

Reference  No.  20 1 8R00 1 27 


TO  BE  FILED  UNDER  SEAL 

Agent  Affidavit  in  Support  of 
Application  for  Search  and  Seizure 

Warrant 


SOUTHERN  DISTRICT  OF  NEW  YORK)  ss.: 


Special  Agent,  Federal  Bureau  of  Investigation,  being  duly  sworn. 


deposes  and  says: 

1.  Introduction 
A,  Affiant 

1 .  I  am  a  Special  Agent  with  the  Federal  Bureau  of  Investigation  (“FBI”).  I  have  been 
a  Special  Agent  with  the  FBI  since  2009.  In  the  course  of  my  experience  and  training  m  these 
positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a  wide  array 
of  financial  crimes,  including  fi-auds  on  financial  institutions,  as  well  as  into  offenses  involving 


public  corruption.  I  also  have  training  and  experience  executing  search  warrants,  including  those 


involving  electronic  evidence, 

2.  I  make  this  Affidavit  in  support  of  an  application  pursuant  to  Rule  4 1  of  the  Federal 

Rules  of  Criminal  Procedure  for  a  warrant  to  search  the  premises  specified  below  (the  Subject 
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Premises”)  and  the  electronic  devices  specified  below  (the  "Subject  Devices”)  for,  and  to  seize, 
the  items  and  information  described  in  Attachments  A,  B,  C,  D,  E  and  F.  This  affidavit  is  based 
upon  my  personal  Icnowledge;  my  review  of  documents  and  other  evidence;  my  conversations  with 
other  law  enforcement  personnel;  and  my  training,  experience  and  advice  received  concerning  the 
use  of  electronic  devices  in  criminal  activity  and  the  forensic  analysis  of  electronically  stored 
infoimation  (“ESI”).  Because  this  affidavit  is  being  submitted  for  the  limited  purpose  of 
establishing  probable  cause,  it  does  not  include  all  the  facts  that  I  have  learned  during  the  comse 
of„my_investigation.-Where,Ahe__contents^_.  documents  ai^  die  actions,  statements,  and 
conversations  of  others  are  reported  herein,  they  are  reported  in  substance  and  in  part,  except  where 
otherwise  indicated. 

B.  The  Subject  Premises  and  Subject  Devices 

3.  Subject  Premises-1,  Subject  Premises-2,  Subject  Premises-3  and  Subject  Premises- 

4  (collectively,  the  “Subject  Premises”)  are  particularly  described  as: 

a.  Subject  Premises-1  is  Apartment  ^|located  inside  the  building  at  502 

Pai'k  Avenue,  New  York,  New  York  10022.  The  building  located  at  502  Parle  Avenue  is  a  32- 
floor  brick  residential  building.  Subject  Premises-1  is  located  on  the^jQoor  of  the  buildmg. 
Based  on  my  review  of  New  York  City  property  records,  I  have  learned  that  Michael  Cohen  and 
Laura  Cohen  own  Subject  Premises-1. ^  Additionally,  as  described  below.  Subject  Premises- 1  is 

Cohen’s  full-time  residence. 

b.  Subject  Premises-2  is  an  office  located  on  the  23rd  floor  of  the  building  at 
30  Rockefeller  Plaza,  New  York,  New  York  10112.  The  building  located  at  30  Rockefeller  Plaza 

tliat  on  or  about  October  28,  2015,  Cohen  tansferred  Subject 

Premises-1  into  a  trust. 

3 


2017.08.02 


Case  l:18-cr-00602-WHP  Document  48-2  Filed  07/18/19  Page  105  of  201 

is  a  66-floor  office  building  that  .spans  the  entire  block  between  Sixth  Avenue  and  Rockefeller 
Plaza.  Subject  Premises-2  is  located  on  the  23rd  floor  of  the  building  inside  of  the  offices  of  the 
law  firm  Squke  Patton  Boggs.  The  office  is  assigned  to  Michael  Cohen.  As  described  below, 

Michael  Cohen  works  and  conducts  meetings  at  Subject  Premises-2. 

c.  Subject  Premises-3  is  a  safety  deposit  box  located  inside  the  TD  Bank 
branch  location  at  500  Park  Avenue,  New  York,  New  York  10019.  Based  onmy  review  of  records 
maintained  by  TD  Banlc,  I  have  learned  that  the  safety  deposit  box  is  approximately  five  inches  by 

ten-inches.in-xize,andis.marked_asJimJ,B_TheAafety_dgpositboxisin^^ 

Cohen  and  Laura  Cohen. 

d.  Subject  Premises-4  is  Room  1728  located  inside  the  Loews  Regency  Hotel 
at  540  Park  Avenue,  New  York,  New  York  10065.  The  building  is  a  luxury  hotel  located  on  Park 
Avenue  and  61st  Street.  Subject  Premises-4  is  located  on  the  17th  floor  of  the  hotel.  Based  onmy 
review  of  emails  obtained  pursuant  to  search  wanants  described  below,  I  have  learned  that  on  or 
about  January  5,  2018,  Cohen  received  an  email  from  an  employee  of  Loews  Regency,  winch 
included  a  price  quote  for  a  long-term  stay  suite  based  on  a  three-month  stay  from  January  8  to 
April  8, 2018.2  Qn  or  about  January  29, 2018,  Cohen  sent  an  email  to  a  Loews  Regency  employee, 
stating,  in  pertinent  part:  ‘T  just  spoke  to  my  wife  and  she  has  scheduled  the  move  for  Thursday. 
Please  mark  down  that  we  will  be  taking  possession  on  Thmsday,  February  1st.”  Based  on  my 
review  of  cell  phone  location  data,  I  have  learned  that,  over  the  past  24  hours,  two  cellular  phones 
used  by  Cohen  have  been  located  in  the  vicinity  of  Subject  Premises-4.  In  particular,  on  or  about 


2  Although  the  quoted  price  contemplated  a  three-month  stay  from  January  8  to  April  8,  it  appeal's 
that  Cohen  did  not  move  in  until  February  1,  and  as  of  today,  April  8,  cellphone  location 
information  demonstrates  that  Cohen’s  cellular  phones  are  in  still  in  the  vicmity  of  Subject 
PremiseS“4. 
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April  8,  2018,  law  enforcement  agents  using  a  “triggerfish”  device  identified  Room  1728  as  the 

room  within  the  hotel  in  which  the  Subject  Devices  ai-e  most  lilcely  present.^ 

e.  Therefore,  I  believe  that  Cohen  is  temporaiily  residing  in  Subject 

Premises-4. 

4.  .  Subject  Device-1  and  Subject  Device-2  (collectively,  the  “Subject  Devices”)  are 

particularly  described  as: 

a.  Subject  Device-1  is  an  Apple  iPhone  seiwiced  by  AT&T  with  the  telephone  number 

BarH  ^^y  nf  records  maintained  by  AT&T,  I  have  learned  that  Subjec^ 

Device-1  is  subscribed  to  Michael  Cohen.  Based  on  my  review  of  cellphone  location  information 
maintained  by  AT&T,  I  have  learned  that  Subject  Device-1  is  presently  located  in  the  Southern 

Disrtict  of  New  York. 

b.  Subject  Device-2  is  an  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number 
j^^^^Based  on  my  review  of  records  maintained  by  AT&T,  I  have  learned  that  Subject 

Device-2  is  subscribed  to  Michael  Cohen.  Based  on  my  review  of  cellphone  location  infonnation 
maintained  by  AT&T,  I  have  learned  that  Subject  Device-2  is  presently  located  in  the  Southern 

District  of  New  York. 

c.  Based  on  my  training,  experience,  and  research,  and  from  consultmg  the 
manufacturer’s  and  service  providers’  advertisements  and  product  technical  specifications 
available  online,  I  Icnow  that  the  Subject  Devices  have  capabilities  that  allowthem  to,  among  other 
things:  malce  and  receive  telephone  calls;  save  and  store  contact  information;  send  and  receive 


^ased  on  my  conversations  with  these  agents,  I  understand  that  it  is  also  possible  that  the  Subject 

DSs  roLfloorbelow,inRoom  1628.  Howevei,  asnoted,IunderrtandthatCo^^^^^^^^^ 

a  nrice  quote  for  a  long-term  stay  suite  and  is  residing  there  with  his  family.  Based  on  nry 
LnversSs  wifri  FBI  agents  conducting  sui-veillance,  I  understand  that  Room  1728  appears  to 
be  a  suite,  whereas  Room  1628  appears  to  be  a  standard  room. 
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emails  and  text  messages;  dottmload  and  tun  mobile  telephone  applications,  inctading  encypted 
call  and  messaging  application  such  as  WhatsApp,  Signal,  and  Dust;  take,  send,  and  receive 
pictures  and  videos;  save  and  store  notes  and  passwords;  and  store  documents. 

C.  The  Subject  Offenses 

5.  For  the  reasons  detailed  below,  I  believe  that  there  is  probable  cause  to  believe  that 

the  Subject  Premises  and  Subject  Devices  contain  evidence,  fruits,  and  insti-umentaUties  of 
violations  of  18  U.S.C.  §§  1005  (false  bank  entries),  1014  (false  statements  to  a  financial 
Jnstitution),D343_(wireflmd),^ndmi_(bM^^^^^^^^^ 

52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions)  (the 
“Campaign  Finance  Offenses”),  and  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other- 
Subject  Offenses)  (collectively,  the  “Subject  Offenses  ). 

D.  Prior  Applications 

6.  The  FBI  and  the  United  States  Attorney’ s  Office  for  the  Southern  District  of  New 
York  (“USAO”)  have  been  investigating  several  courses  of  criminal  conduct  by  Michael  Cohen. 
Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President  Donald 
Tmmp,  and  who  previously  served  for  over  a  decade  as  an  executive  in  die  Trump  Organization, 

an  international  conglomerate  with  real  estate  and  other  holdings. 

7.  In  connection  with  an  investigation  then  being  conducted  by  the  Office  of  the 
Special  Counsel  (“SCO”),  the  FBI  sought  and  obtained  from  the  Honorable  Beiyl  A.  Howell,  Chief 
United  States  Distilct  Judge  for  the  District  of  Columbia,  thi-ee  seai'ch  warrants  for  emaUs  and 
other  content  information  associated  with  two  email  accounts  used  by  Cohen,  and  one  search 
wai-rant  for  stored  content  associated  with  an  iCloud  account  used  by  Cohen.  SpecificaUy: 
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a.  On  or  about  July  18, 2017,  the  FBI  sought  and  obtained  a  search  warrant  for 
emails  in  the  aeeount^^H^smaU.com  (the  “Cohen  OmaU  Aceounf)  sent  or  reeeived 
between  January  1,2016  and  July  18, 2017  (the  “First  Cohen  Gmail  Warrant”). 

b.  On  or  about  August  8,  2017,  the  FBI  sought  and  obtained  a  seai'ch  warrant 

for  content  stored  in  the  iCloud  account  associated  with  Apple  ID  ^^^H^gmail.com  (the 

“Cohen  iCloud  Account”  and  the  “Cohen  iCloud  WaiTant”). 

c.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  search 

warrant  fb]^emailsAnAhe_jCohenJ3mail  AccgunLsenLoi  mce^  h  2015  and 

November  13, 2017  (the  “Second  Cohen  Gmail  Warrant”). 

d.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  search 

warrant  for  emails  in  the  accoum^^^^Hthe  “Cohen  MDCPC  Account”)- sent  or 
received  between  the  opening  of  the  Cohen  MDCPC  Account^  andNovember  13, 2017  (the  ‘Tii'st 
Cohen  MDCPC  Warrant”). 

8.  The  SCO  has  since  referred  certain  aspects  of  its  investigation  into  Cohen  to  the 
USAO,  which  is  working  with  the  FBFs  New  York  Field  Office.  As  part  of  that  refeiTal,  on  or 
about  Februai-y  8,  2018,  the  SCO  provided  the  USAO  with  all  non-privileged  emails  and  other 
content  information  obtained  pursuant  to  the  Fust  Cohen  Gmail  Warrant,  Second  Cohen  Gmail 
Warrant,  and  Cohen  MDCPC  WaiTant.  On  or  about  March  7,  20 1 8,  the  SCO  provided  the  USAO 


4  Based  on  my  review  of  this  warrant  and  the  affidavit  in  support  of  it,  I  loiow  that  the  warrant  ^d 
not  pecily  a  time  period,  but  the  affidavit  indicated  that,  pursuant  to  court  order,  the  s™e 

pro4LhIdprovidednon-contentinformationfortheCohenMDCPCA^^^^^^ 

the  account  contained  emails  from  the  approximate  period  of  March  2017  through  the  date  of  the 
wan-ant 
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with  all  non-privileged  content  obtained  pursuant  to  the  Cohen  iCloud  Warrant.^  A  filter  team 
worldng  with  the  SCO  had  previously  reviewed  the  content  produced  pursuant  to  these  waiTants 

for  privilege. 

9.  On  or  about  Febmary  28, 20 1 8,  the  USAO  sought  and  obtained  seai'ch  warrants  for 
emails  in  the  Cohen  Gmail  Account  and  the  Cohen  MDCPC  Account,  among  other  accounts,  sent 
or  received  between  November  14,2017  andFebi'uai728, 2018  (the  “Thkd  Cohen  Gmail  Warrant 
and  the  “Second  Cohen  MDCPC  Warrant”).  The  content  produced  pursuant  to  these  wairants  is 

subjeGt4o-amongoingreviewJfor_priviIege,,by_mSDNY.filtgrtg^^ . . . 

10.  The  emails  search  wai'rants  described  above  are  referred  to  collectively  as  the 
“Cohen  Email  Warrants.” 

11.  On  or  about  April  7,  2018,  the  USAO  and  FBI  sought  and  obtained  a  warrant  for 
prospective  and  historical  cellphone  location  information  for  Subject  Device-1  and  Subject 
Device-2.  On  or  about  April  8, 20 1 8,  the  USAO  and  FBI  sought  and  obtained  authority  to  employ 
an  elech-onic  technique,  commonly  Icnown  as  a  “figgerfish,”  to  deteimine  the  location  of  Subject. 
Device-1  and  Subject  Device-2. 

n.  Probable  Cause 
A.  Overview 

12.  The  United  States  Attorney’s  Office  forthe  Southern  District  of  New  York  and  FBI 
are  investigating,  among  other  things,  schemes  by  Tai'get  Subject  Michael  Cohen  (a)  to  defraud 
multiple  banlcs  fr-om  in  or  about  2016  up  to  and  including  the  present,  and  (b)  to  malce  an  Ulegal 


5  The  SCO  had  previously  provided  a  subset  of  this  non-privileged  content  on  or  about  February 
2,2018. 

^  On  or  about  February  28, 2018  and  April  7, 201 8,  the  USAO  and  FBI  sought  and  obtained  Rule 
41  seai’ch  warrants  authorizing  the  search  of  emails  and  content  obtained  pursuant  to  previously 
issued  warrants  for  additional  subject  offenses. 
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campaign  contiibution  in  October  2016  to  tlien-presidential  candidate  Donald  Trump.  As  noted, 
Cohen  is  an  attorney  who  cun-ently  holds  himself  out  as  the  personal  attorney  for  President  Donald 
Trump,  and  who  previously  served  for  over  a  decade  as  an  executive  in  the  Trump  Organization, 

an  international  conglomerate  with  real  estate  and  other  holdings. 

13.  The  investigation  has  revealed  that  Cohen  has  made  affirmative  misrepresentations 

in  and  omitted  material  information  from  financial  statements  and  other  disclosures  that  Cohen 
provided  to  multiple  banlcs  in  connection  with  a  transaction  intended  to  relieve  Cohen  of 
rapproximately-$22-miUiomin_dcblhe.  Qwed  on  taxi  meMign  loans  from  the  b^  As  set  forth 

in  detail  below,  in  these  fmancial  statements,  and  in  his  oral  and  other  written  statements  to  these 
banlcs,  Cohen  appeai-s  to  have  (i)  intentionally  misrepresented  his  ability  to  pay  cash  by  failmgto 
disclose  cashhe  began  receiving  in  2017  firom  new  consulting  work;  (ii)  significantly  understated 
his  total  holdings  of  cash  and  cash  equivalents;  (iii)  failed  to  disclose  tens  of  thousands  of  dollars 
he  received  in  monthly  interest  income,  and  (iv)  failed  to  inform  the  banlcs  from  which  he  was 
seelcing  debt  rehef  that  he  had  agreed  to  make  a  $3.8  million  cash  payment  to  a  thii’d  paity,^ 
in  connection  wit:^^^^|  acquisition  of  the  taxi  medallions  securing  Cohen’s 
debt.  By  malcing  these  misrepresentations  and  material  omissions,  Cohen  avoided  malcing 
monUily  payments  on  his  loans,  and  attempted  to  fraudulently  induce  the  banlcs  to  reUeve  him  of 
certain  repayment  obligations  and  personal  guarantees  that  Cohen  and  his  wife  had  signed. 

14.  Additionally,  the  investigation  has  revealed  that  shortly  before  the  2016 
presidential  election,  Cohen  made  a  payment  of  $130,000  from  a  limited  liability  corporation 
'  (“LLC”)  to  Stephanie  Clifford,  an  individual  who  is  alleged  to  have  had  an  extramaidtal  affair  with 
then-candidate  Trump.  This  payment  was  made  to  Clifford  in  exchange  for  an  agi-eement  not  to 
make  any  public  disclosmes  about  her  alleged  affair  with  Trump.  As  set  forth  below,  there  is 
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probable  cause  to  believe  tliat  Cohen  made  this  payment  to  Clifford  for  tlie  purpose  of  mfluencmg 
the  presidential  election,  and  therefore  that  the  payment  was  an  excessive  in-ldnd  contribution  to 

the  Trump  campaign. 

15.  Based  on  my  review  of  emails  obtained  from  the  Cohen  Email  Waiiants, 
infoimation  obtained  pursuant  to  the  iCloud  Warrant,  and  documents  produced  pursuant  to 
subpoenas,  as  well  as  my  review  of  public  sources,  I  have  learned  that  Cohen  has  used  the  Subject 
Premises  to  (a)  receive  documents  related  to  the  transaction  intended  to  relieve  Cohen  of  his  taxi 
medallion  debt  (b)  i-RP-eive  documents  and/or  conduct  meetings  related  to  his  consulting  work,  (c) 
receive  documents  and/or  conduct  meetings  relating  to  his  finances  and  assets,  some  of  which,  as 
noted  above  and  as  detailed  further  herein,  he  has  concealed  from  the  banlcs  in  connection  with  the 
refinancing  of  his  taxi  medallion  debt,  (d)  receive  and  send  documents  relatmg  to  his  payment  to 
Clifford,  and  (e)  house  and  operate  electronic  devices  that  were  utilized  in  connection  with,  among 
other  things,  the  taxi  medallion  ti-ansaction,  Cohen’s  consulting  work,  and  his  payment  to  Clifford. 
Specifically,  as  described  below.  Subject  Premises-1  lilcely  contains  evidence  concerning  Cohen’s 
taxi  medallion  loans,  his  negotiations  with  banlcs,  his  personal  finances,  his  consulting  work,  his 
tax  returns,  and  his  payment  to  Clifford,  as  well  as  electronic  devices  containing  such  evidence, 
all  of  which  constitute  or  contain  evidence  of  the  Subject  Offenses.  Additionally,  as  described 
below.  Subject  Premises-2  likely  contains  evidence  relating  to  Cohen’s  consulting  work,  his, 
finances,  and  his  payment  to  Clifford,  as  well  as  electronic  devices  containing  such  evidence. 
Subject  Premises-3,  as  described  below,  likely  contains  evidence  relating  to  Cohen’s  assets  and 
finances,  including  assets  that  may  not  have  been  disclosed  to  banks  in  connection  with  the 
refinancing  of  Cohen’s  taxi  medallion  debt  or  documents  relating  to  such  assets,  and  documents 
or  evidence  related  to  Cohen’s  payment  to  Clifford.  Subject  Premises-4  likely  contains  elecfr-onic 
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devices,  including  Subject  Device-1  and  Subject  Device-2,  which  themselves  contain  evidence  of 
the  Subject  Offenses,  including  concerning  Cohen’s  taxi  medallion  loans,  his  negotiations  with 
banlfs,  his  personal  finances,  his  consulting  work,  his  tax  returns,  and  his  payment  to  Clifford. 
Accordingly,  and  as  set  forth  in  more  detail  below,  there  is  probable  cause  to  believe  that  the 
Subject  Premises  and  Subject  Devices  will  include  evidence  of  the  Subject  Offenses. 

B.  Probable  Cause  Regarding  Subjects’  Commission  of  the  Subject  Offenses’ 

The  Bank  Fraud  Scheme 

_ (i)  Cohen ’s  Statements  to  Sterling  National  Bank _ _ 

16.  As  set  forth  in  detail  below,  in  2014,  Cohen,  toough  LLCs  controlled  by  him  and 

his  wife,  Laura  Cohen,  entered  into  a  series  of  loans  fi'om  Sterling  National  Banlc  ("Sterlmg”)  and 
the  Mekose  Credit  Union  (“Mehose”),  secui'ed  by  taxi  medallions,  for  approximately  $20  million. 
Though  entered  into  by  LLCs,  the  loans  were  also  secured  by  personal  guarantees  in  the  names  of 
both  Cohen  and  his  wife.  Over  time,  as  the  taxi  industiy  weakened  and  the  medallions  lost  value, 
Cohen  sought  to  renegotiate  the  terms  of  those  loans  and/or  relieve  himself  feom  their  obligations, 
including  the  personal  guarantees.  As  part  of  that  effort,  Cohen  made  a  series  of  representations 
to  Sterling  and  Melrose  about  his  net  worth,  assets,  available  cash  and  income,  among  other  things. 
Specifically,  based  on  my  review  of  records  maintained  by  Sterling  and  Mekose,  and  pubkc 
som-ces  concerning  the  taxi  industry  and  the  value  of  taxi  medallions,  as  well  as  my  participation 
in  interviews  with  a  Sterling  executive  vice-president  (the  “Sterling  Employee-1”)  and  two  other 


^^^Tthiuollowing  recitati^f  probable  cause,  I  frequently  refer  to  phone  calls  or  text  messages 
invoN^g  Cohen  The  text  messages  described  herein  as  sent  or  received  by  Cohen  wei.  « 
or  received  fi-om  the  telephone  numbers  associated  with  Subject  Device-1  or  Subject  Device-2^ 
The  vast  majority  of  the  phone  calls  described  herein  made  or  received  by  Cohen  were  imde  oi 

received  bythe  telephonenumbers  associated  with  SubjectDevice-1  or  Subject  Device-2,  although 

in  certain  limited  instances  Cohen  used  a  landline  or  other  phone. 
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Sterling  employees  (“Sterling  Employee-2”  and  “Sterling  Employee-3”),  I  have  leaimed,  among, 
other  things,  the  following; 

a.  Taxi  medallions  ai'e  small  metal  plaques  affixed  to  taxis.  Without  a  medallion,  it 

is  illegal  to  operate  a  taxi  in  cities  with  medallion  systems,  such  as  New  York  Cily .  Cohen  and  his 
wife  own  multiple  LLCs  that  collectively  own  32  taxi  medallions  (each  EEC  owns  two 
medallions).*  Cohen’s  purchase  of  these  New  York  taxi  medallions  was  originally  financed-  by 
loans  fi-om  Capital  One  banlc,  for  which  the  medallions  served  as  collateral.  Cohen  was  not  a  taxi 

-operatoi-and  leased-hisunedallions4o_a  third_paity  That  JikdpArty  made  monthly  payme^ 

Cohen,  who  in  turn  used  some  of  those  proceeds  to  make  his  monthly  loan  payments  to  Capital 
One. 

b.  In  early  2014,  Cohen  became  a  customer  of  Sterling  when  he  sought  to  refinance  a 
mortgage  on  a  rental  propeity  that  he  owned.  In  or  around  April  20 14,  Cohen  raised  with  Sterling 
the  prospect  of  refinancing  his  taxi  medallion  loans,  which  were  then  at  Capital  One.  By  in  or  about 
September  2014,  Cohen  began  negotiating  a  lending  transaction  with  Sterling  that  would  allow 
Cohen  to  pay  off  his  loans  at  Capital  One  and  borrow  more  money  from  the  then-increase  m  value 
of  the  medallions.  According  to  Sterling  Employee-1,  in  2014,  prior  to  the  recent  upheaval  in  the 
taxi  industiy— as  a  result  of  the  emergence  of  ride-shaiing  services,  such  as  Uber— taxi  medallion 
loans  were  viewed  by  banlcs  and  investors  as  safe,  short  term  credits,  as  the  market  value  of  taxi 
medallions  was  consistently  rising.  Consequently,  taxi  medallion  loans— lUce  the  loans  held  by 
Cohen— were  frequently  refinanced  at  increasing  amounts  as  the  value  of  the  medallions  rose. 
According  to  Sterling  Employee-1 ,  borrowers  typically  cashed  out  the  increase  in  the  loan  amount 


^ne  of  these  companies^  Mad  Dog  Cab  Corp.,  was  jointly  owned  by  Sondra  Cohen,  who  I 
believe  is  Cohen’s  mother. 
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and  used  the  additional  funds  for  other  purposes.  Cohen  appears  to  have  followed  this  approach  m 
2014,  when  he  agreed  to  refinance  his  medallion  loans  for  approximately  $22  million,  which 
according  to  letters  from  Capital  One  in  Sterling’s  files— was  greater  than  his  previous  debt  at 
Capital  One  Bank  ($21  million,  of  which  $  1 4.6  million  was  a  line  of  credit  to  Colien).  This  allowed 

Cohen  to  cash  out  the  proceeds  from  the  transaction. 

c.  Based  on  my  review  of  records  maintained  by  Sterling,  I  have  learned  that  on  or 

aboutDecember  8, 2014,  each  of  Cohen’s  sixteen  taxi  medallion  LLCs  entered  into  loan  agreements 
and-promissoiymotesJwith-Sterimg,£QrJhe_prim  of  Sl.^jZgW.with  repayment  due  on 

December  8, 2016.  Each  loan  was  signed  by  Michael  or  Laura  Cohen,  depending  on  who  was  the 
sole  shareholder  of  the  LLC.  The  address  listed  for  each  of  the  LLCs  was  the  address  for  Subject 
Premises-1 .  The  loans  were  also  each  secured  by  a  security  agreement,  dated  the  same  day,  making 
the  medallions  collateral  for  the  notes.  To  give  Sterling  additional  security,  Michael  and  Laura 
Cohen  signed  personal  guarantees  and  confessions  of  judgment,  giving  Sterlmg  the  ri^t  to  pursue 
collection  against  the  Cohens’  personal  assets  were  their  corporations  to  default  under  the  loan 
agreements.  The  personal  guai-anty  agreements  stated  that  the  LLCs  had  offices  at  the  address  for 
Subject  Premises-1,  and  contained  a  notice  provision  that  stated  that  any  notices  requu-ed  by  the 
agreements  should  he  mailed  to  Subject  Premises-1.  In  total.  Sterling  agreed  to  lend  approximately 
$22  million  to  the  Cohens’  companies. 

d.  Pursuant  to  participation  agreements,  Sterling  transferred  45  percent  of  Cohen  s 
taxi  medallion  debt  to  Melrose.^ 


^  Meh'ose,  which  had  a  business  principally  focused  on  taxi  medallion  loans,  is  now  in 
conservatorship  hy  the  National  CredifUnion  Administration  (“NCUA”). 
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e.  In  evaluating  Cohen’s  requested  refinancing  of  the  taxi  medallions,  Sterlmg  (and 
Mehose,  consistent  with  its  participation  in  the  deal)  conducted  due  diligence.  At  Sterling’s 
request,  Cohen  provided  Sterling  with  a  statement  of  financial  condition,  dated  August  1,  2014 
(the  “August  2014  Financial  Statement”),  which  indicated  that  Cohen  had  $100,740,000  m  total 
assets,  $23,550,000  in  total  liabilities,  and  a  net  worth  of  $77,190, OOO.^^  From  my  review  of  a 
Sterling  credit  memorandum,  dated  September  29,  2014,  I  Icnow  that  Sterling  viewed  the 

ti-ansactionfavorably  because,  accountingfor  loan  payments, cashflows  from  the  medallions  were 

projected  to  be  positive,-thewaluemf  the  cMateM<as  es^^^^^  Sterling)  exceeded  $42  million^ 

and  the  net  worth  of  Cohen— who  was  the  dkect  obligor  under  the  guai'antee  agi'eements— was 
over  $77  milhon.  An  internal  Sterling  credit  and  risk  rating  analysis  report,  dated  October  20, 
20 1 4,  recommended  approval  of  the  loans  for  substantially  the  same  reasons. 

f.  Based  on  my  review  of  records  maintained  by  Sterling  and  public  soui'ces,  I  have 


leai-nedthat  overtime,  the  collateral  bacldng  Cohen’s  loans  (taxi  medallions)  lessened  in  value  due 
to  the  rise  in  ride-sharing  companies.  Additionally,  Cohen  began  falling  behind  on  loan  payments 
to  Sterling  and  Melrose.  I  Icnow  firom  records  maintained  by  Sterling  and  an  inteiwiew  with  Sterlmg 
Employee-2  that,  beginning  in  or  around  September  2015,  Cohen  told  Sterlmg,  m  sum  and 
substance,  that  the  individual  leasing  Cohen’s  medallions  had  fallen  behind  in  malcing  payments  to 
Cohen,  and  that  as  a  result,  the  monthly  cash  flow  fi-om  his  taxi  medallions  had  been  reduced, 
leaving  him  with  a  shortfall  of  approximately  $16,000  each  month.  For  instance,  I  have  reviewed 
an  email  from  Sterling  Bmployee-2,  dated  September  9,  2015,  summarizing  a  call  with  Cohen— 
which  according  to  the  email  and  toll  records  for  Cohen’s  cellphone  occurred  on  September  8, 


Cohen  subsequently  provided  Sterling  with  a  revised  statement  of  financial  "^on,  also 
dated  August  1, 2014,  which  reported  assets  of  $99,420,000,  total  liabilities  of  $23,550,000,  and  a 
net  woith  of  $75, 870,000. 
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2015— during  which  Cohen  told  Sterling  Employee-2,  in  sum  and  substance,  about  his  cash  flow 
problems  and  a  monthly  shortfall  of  approximately  $16,000.  In  that  same  email,  Sterlmg 
Employee-2  commented  that  despite  Cohen’s  statements,  his  personal  financial  information 
“indicate[d]  a  strong  ability  to  malce  up  the  difference  in  payments.”  Cohen,  however,  accordmg 
to  Sterling  Employee-2,  pushed  the  bank  for  a  reduction  in  Cohen’s  monthly  payments. 

g.  From  my  review  of  records  maintained  by  Sterling  and  my  participation  in  an 
interview  with  Sterling  Employee-2,  I  have  leai-ned  that  Cohen  and  Sterling  Employee-2  spoke 

. again  omSeptemben28, 2015,  anddmymngjmc^^^ 

individual  to  whom  Cohen  leases  the  medallions  had  again  reduced  monthly  payments  to  Cohen.  I 
loiow  from  my  review  of  records  maintained  by  Sterling  that  between  in  or  about  September  2015 
and  November  2015,  Sterling  raised  the  possibility-both  internally  and  with  Cohen-uf  Cohen 
posting  his  real  estate  holdings,  personal  residence,  or  some  other  collateral  as  additional  security 
for  the  banlcs.“  According  to  these  records,  however,  Cohen  resisted  these  requests.  From  my 
review  of  loan  documents  and  records  maintained  by  Sterling,  I  Icnow  that  in  or  about  November 
2015,  as  a  result  of  Cohen’s  representation  that  he  was  not  earning  sufficient  returns  on  his 
medallions  to  cover  monthly  interest  payments.  Sterling  and  Mekose  agreed  to  amend  their  loans 
witii  Cohen  by,  among  other  things,  reducing  the  interest  rate  Cohen  paid  to  Melrose  and  extendmg 

the  loan  maturity  date  to  December  8^  2017, 

h.  I  Icnow  fr-om  intemews  with  Sterlmg  Employee-1  and  Sterling  Employee-2,  as  well 

as  emails  '!  have  reviewed,  that  in  or  about  October  2016,  Cohen  told  Sterling  Employee-1  that 

Cohen  had  a  potential  buyer  of  his  taxi  medallions,  named 


H  Based  on  my  review  of  property  records,  I  Icnow  that  on  or  about  October  28, 2015  ai'ound 
the  time  period  when  Sterling  raised  the  possibility  of  Cohen  posting  his  personal  residence- 
SubjectPremises-1— as  collateral,  Cohen  transferred  Subject  Premises-1  into  ati'ust. 
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assume  Cohen’s  debt  with  Sterling  and  Melrose.  Based  on  my  review  of  recoi-ds  maintained  by 
Sterling,  as  well  as  the  interviews  with  Sterling  Employee-1  and  Sterling  Employee-2  referenced 
above,  I  know  that  by  or  before  October  2016,  Cohen  had  entered  into  negotiations  to  sell  his  sixteen 

for  the  balance  of  the  loans,  which  at  the  time  was  $21 ,376,000.  I  loiow  from  my  review  of  records 
maintained  by  Sterling,  and  my  participation  in  an  inteiview  with  Sterling  Employee-2,  that  as  a 
condition  of  the  transfer  of  the  medallion  loans— and  because  Sterling  was  unfamiliar  with 


Sterling-  requested  that  Cohen  make  a  substantial  pi-incipal  payment  on  the  loan,  of 
approximately  one  million  dollars,  prior  to  the  transfer.  Cohen  rejected  this  request  initially.  But 
on  or  about  January  3 1 , 20 1 7,  Cohen  told  Sterling  Employee- 1 ,  in  sum  and  substance,  that  he  would 
make  a  one  million  dollar  principal  reduction  payment  in  order  to  move  fomard  with  the  medallion 


transfer  deal  with 


Indeed,  in  an  email  sent  by  Cohen  to  Sterling  Employee-2  on  or 
about  February  22,  2017,  Cohen  confirmed  that  he  “agreed  to  pay  down  1  million  fr'om  the  loan 
amount” 


i.  Pursuant  to  the  participation  agreements  between  Sterling  and  Mehose,  Sterling 
was  required  to  secure  Mekose’s  agreement  to  participate  in  the  transfer  of  the  taxi  medallion  debt 
from  Cohen  to^^^^^^  On  or  about  April  17,  2017,  Sterling  sent  a  memorandum  to 
Melrose  summai-izing  the  terms  of  the  proposed  transaction,  and  noting  the  requirement  that 
Melrose  agree  to  the  terms.  On  or  about  May  2,  2017,  Sterling  Employee- 1  told 

that  Mekose  had  agreed  to  the  deal  in  principle,  and  that  Sterling  would  be  sending  the  parties  a 

term  sheet  shortly. 

j.  In  order  for  the  banks  to  conduct  diligence  and  evaluate  the  proposed  transaction 


fully,  they  requested  financial  information  from  the  parties.  On  or  about  June  7,  2017,  Sterling 
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Employee-1  emaUed  Cohen  to  request  an  “updated  personal  financial  statement  ”  completed 
jointly  with  Cohen’s  wife,  and  Cohen’s  most  recent  federal  income  tax  return.  On  or  about  June 
8, 2017,  Cohen  emailed  Sterling  Employee- 1  a  Sterling  personal  financial  statement  form  that  had 
been  filled  out  by  hand,  which  referenced  a  statement  of  financial  condition,  dated  May  1,  2017 
(the  “May  2017  Financial  Statement”)  that  was  also  attached.  The  May  2017  Financial  Statement 
included  a  cover  letter  hum  Cohen’s  accountant,  Jeffrey  Geteel,  stating,  in  sum  and  substance,  that 
the  infomation  in  the  statement  came  from  Cohen  and  that  Geteel  had  not  confirmed  its  accuiucy 

0i^e0mpleteness.---IheMay  2QL7J&mancM  Statg^^^^  that  Cohgi  had  total  assets_of^ 

$41,955,000,  total  liabilities  of  $39,130,000,  and  a  net  worth  of  $2,825,000.  The  May  2017 
Financial  Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in  cash, 
$26,155,000  in  closely  held  companies  (such  as  the  taxi  medallion  entities  and  his  real  estate 
holdings),  $3,200,000  in  real  estate  investments,  and  his  $1 1,000,000  pei-sonal  residence. 

k.  Based  on  my  review  of  repoils  of  law  enforcement  interviews  of  Sterling 
Employee-1, 1  have  learned  that  Sterling  Employee-1  reviewed  the  May  2017  Financial  Statement 
with  Cohen  to,  among  other  things,  verify  its  accuracy ,  and  Sterling  Employee- 1  asked  Cohen  about 
specific  line  items  on  the  financial  statement,  including  tire  cash  amount,  value  of  medallrons,  and 
total  liabilities.  Cohen  stated  to  Sterling  Employee-1,  in  sum  and  substance,  that  the  May  2017 


Financial  Statement  was  accurate. 


1.  On  or  about  August  16,  2017,  Sterling  Employee- 1  emailed  Cohen  anr^^H 
attaching  a  non-binding  term  sheet  memorializing  the  potential  transaction  between 


12  j 

assets 

primarily  uy  *  — jr- - 

investments. 
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Sterling,  Mekose,  Cohen,  and| 


The  term  sheet  included  a  cover  letter  addressed 


to  Cohen  at  Subject  Premises-1.  The  parties  negotiated  the  provisions  of  the  term  sheet  and,  on  or 
about  September  5,  2017,  Sterling  Employee-1  sent^^^^^^|^d  Cohen  a  copy  of  the 
executed  term  sheet.  According  to  the  term  sheet^^^Hwould  borrow  $20,000,000 
fi'om  Sterling  and  Mekose,  to  be  seemed  by  the  medallions  that  | 


vas  to  acquke  fi'om 


Cohen. 

m.  As  pai-t  of  the  agreement,  according  to  the  term  sheet,  $1,265,913  in  principal  (which 

la-whartwould-remainmftei^the420,000,Q00_payimntmMoutstento^^ 

repaid  by  Cohen  and  the  two  banlcs,  with  Cohen  paying  fifty  percent  and  the  banks  dividmg  the 
remaining  half  of  the  balance.  Based  on  my  review  of  an  internal  Sterling  credit  memorandum, 

dated  October4, 2017, the  parties  reachedapreliminaiy  agreement  that  Cohen  wouldpay  $632, 956 

of  the  remaining  $1,265,912  principal  loan  balance,  and  Sterling  and  Melrose  would  absorb 
$357,167  and  $275,789,  respectively,  in  the  form  of  chai'ge-offs.  According  to  Sterling  Employee- 
1,  Sterling  was  wUling  to  divide  the  repayment  of  the  outstanding  principal  balance— despite  its 
prior  insistence  that  Cohen  malm  a  principal  pay-down  of  at  least  one  million  dollai's-because 
Cohen  represented  on  a  telephone  call  with  Sterling  Employee-1,  in  sum  and  substance,  that  he  had 

insufficient  liquidity  to  pay  thefiill  outstanding  principal  balance.  As  partoftheagi-eement,Sterlmg 

and  Mekose  also  agreed  to  relieve  Cohen  and  his  wife  of  the  personal  guai-antees  that  they  made 
on  behalf  of  the  LLCs.  Thus,  after  completing  the  ^^^^Hi-'ansaction,  Cohen  would  no  longer 

have  had  any  outstanding  obligations  to  Sterling  or  Melrose. 

n.  Based  on  my  review  of  emails  sent  by  Sterling  employees,  I  have  learned  that 

because  the  kansaction  between  the  parties  was  subject  to  full  credit  underwriting  by  Sterling  and 
Melrose  (as  well  as  Mekose’s  regulators  at  NCUA),  in  August  and  September  2017,  Sterling 
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requked  and  requested  additional  financial  statements  and  tax  returns  for  Cohen  anc^^^^ 
for  its  credit  under-writing  process.  In  response  to  Sterling’s  requests,  on  or  about  September  25, 
2017,  Cohen  emailed  Sterling  Employee-2  a  copy  of  his  2016  tax  return.  The  tax  letui-n  listed 
Cohen’s  maUing  address  as  Subject  Premises-1 .  Additionally,  on  or  about  October  5, 2017,  Cohen 
re-sent  Sterling  Employee-2  a  copy  of  his  May  2017  Financial  Statement.  A  day  later,  on  October 
6, 2017,  Cohen  emailed  Sterling  Employee-2  a  statement  of  financial  condition,  dated  September 

30, 2017  (the  ‘‘September  2017  Financial  Statement  ), 

0.  the-May-7.017^FinanciaLStatement,:^^  September  ^17  Financtal  Statement 

included  a  cover  letter  from  Jeffrey  Getzel,  Cohen’ s  accountant,  stating,  in  sum  and  substance,  that 
the  information  in  the  statement  came  from  Cohen,  and  that  Getzel  had  not  confn-med  its  accuracy 
or  completeness.  The  September  2017  Financial  Statement  stated  that  Cohen  had  total  assets  of 
$33,430,000,  total  liabilities  of  $45,630,000,  and  a  negative  net  worth  of  $12,200,000.1^  Notably, 
unlike  Cohen’s  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
represented  to  Sterling  that  Cohen  had  a  negative  net  worth.  The  September  2017  Financial 
Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in  cash,  $17,630,000  m, 
closely  held  companies  (including  the  taxi  medallion  entities  and  his  real  estate  holdings), 
$3,200,000  in  real  estate  investments,  and  his  $1 1,000,000  personal  residence  (which,  for  the  first 


13  Based  on  my  review  of  Cohen’s  financial  statements,  I  Icnow  that  this  further  dechne  m 
assetslnbe  explaLd  primarily  by  reported  depreciation  in  the  value  of  Cohen  s  real  estate  assets 

and  medallion  investments. 

“Notably,  the  September  2017  Financial  Statement  yalued  each  of  Cohen’s  thilty-too  New 
York  taxi  medallions  at  approximately  $180,187.50,  whig^yonsiderably  less  than  the 
$650,000  valuation  ascribed  to  each  medallion  in  the  Cohen-^^^^^" 
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* 


time,  he  indicated  was  held  by  a  trast) The  September  20 1 7  Financial  Statement  included  assets 
and  liabilities  not  held  in  Cohen’s  name,  such  as  various  entities  associated  with  his  taxi  medallions 

and  some  of  his  real  estate  investment  entities . 

p.  From  my  participation  in  an  interview  with  Sterling  Employee-2,  and  my  review  of 

records  maintained  by  Sterling,  I  have  also  learned  that  around  the  time  Cohen  provided  Sterlmg 
with  these  financial  statements— i.e.,  in  or  around  September  2017— Cohen  stopped  paying 
monthly  loan  payments  on  his  taxi  medallion  loans  altogether.  According  to  Sterling  Employee- 

-2TGoheninformefiSterling,insumandsubstaJmthathehad.insufficientfundstopayfe 

principal  and  interest  payments  on  his  medallion  loans.  By  in  or  about  December  2017,  Sterlmg 
and  Mekose  had  not  been  paid  approximately  $276,937.92  in  monthly  principal  and  interest 
payments  on  the  medallion  loans.  Based  on  Cohen’s  financial  condition  as  conveyed  m  the 
September  2017  Financial  Statement,  and  his  delinquency  in  making  payments  to  Sterlmg,  among 
other  things,  the  banlc’s  credit  underwriting  committee  determined  (and  memorialized  m  a 
December  2017  memorandum)  that  the  Cohen- favorable  for  the  banlc 
—  that  is,  that  ^^^^^^^vould  be  a  better  borrower  than  Cohen, 

q.  On  or  about  December'26,  2017,  Sterling  sent  Cohen  a  demand  letter  requesting 
the  immediate  receipt  of  past-due  loan  payments.  The  demand  letter  was  addi'essed  to  Cohen  at 
Subject  Premises-1.  On  December  29,  2017,  Sterling  sent  Cohen  a  letter  stating  that  he  was  in 
default  under  the  loans  between  Sterling  and  Cohen’s  medallion  corporations.  The  notice  of 
default  was  addi'essedto  Cohen  at  Subject  Premises-1.  Cohen  did  not  make  an  immediate  payment 
on  the  loans,  but  instead  sent  an  e-mail  to  Sterling  Employee-1  on  or  about  Januaiy  24,  2018, 


‘5  Based  on  my  review  of  property  records  maintained  by  the  City  of  New  Yorlc,  and  my 
participation  in  an  interview  with  Getzel,  I  Imow  that  in  2013, 

a  ttust  He  did  not  disclose  that  transaction  to  Getzel  or  Sterlmg  until  m  or  about  September  2017. 
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stating  that  during  the  closing  of  the  Cohei^^^^^^^|i'ansaction,  Cohen  would  biing  all 
payments  up  to  date  as  well  as  deposit  the  payoff  differential.”  Cohen  also  requested  by  email  on 
January  24, 2018,  that  at  tire  closing  of  the  Cohen-^^^^|i'ansaction,  Sterling  provide  a  letter 
stating  that  all  of  Cohen’s  debts  have  been  satisfied  and  that  Cohen’s  personal  guarantees  of  the 
medallion  loans  had  been  terminated. 

r.  The  Cohen-^^^^^Jransaction,  however,  did  not  close.  On  or  about  January 

29,  20 1 8,  attorney  emailed  attorneys  for  Sterling  and  stated  that  at  this  time 

_  there  is  no  deal  with  Michael  Cohen.  Some  of  the  numbers  have  changed  and  we  are  not  prepared 
to  go  foiward.” 

s.  Based  on  my  participation  in  the  interview  with  Sterling  Employee-2  and  my 
review  of  records  maintained  by  Sterling,  I  loiow  that  after  the  Cohen-^^^^^^|ieal  fell  apart. 
Sterling  assigned  Cohen’s  loans  to  Sterling  Employee-3,  who  specializes  in  collecting  on 
defaulting  loans.  From  my  participation  in  an  interview  with  Sterling  Employee-3,  my  review  of 
telephone  call  notes  taken  by  Sterling  Employee-3,  and  my  review  of  telephone  records,  I  know 
that  Sterling  Employee-3  spoke  several  times  to  Cohen  on  or  about  January  30, 2018  about  paying 
down  and/or  restructui'ing  Cohen’s  outstanding  taxi  medallion  loans.  On  the  calls,  which  in  total 
lasted  more  than  an  hour,  Cohen  stated  in  sum  and  substance  that  he  did  not  have  more  than 
$1,250,000  to  pay  toward  the  medallion  loans.  On  the  call,  in  the  course  of  reviewing  the  failed 
Cohen-||[m^^|  transaction,  Sterling  Employee-3  questioned  Cohen  about  the  price 

mm  was  to  have  paid  for  each  medallion,  and  whether  there  was  a  side  agreement  between. 
Cohen  and^^^^^|  Cohen  denied  that  there  was  any  side  agreement  with^^^^^^ 

t.  On  or  about  January  31,  2018,  Cohen  emailed  Sterling  Employee-3  and  proposed 
paying  $500,000  to  bring  the  loans  current  and  $750,000  to  bring  the  principal  balance  to 
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$20,500,000.  Cohen  also  suggested  revised  monthly  interest  payment  amounts.  The  signatui'e 
block  on  the  email  indicated  that  Cohen’s  address  was  the  address  for  Subject  Premises-2.  On  or 
about  January  31,  2018,  Sterling  Employee-3  responded  to  Cohen  and  stated,  in  sum  and 
substance,  that  Cohen  would  need  to  pay  the  entirety  of  the  overdue  payments  and  pay  down  the 
principal  balance  of  the  loan  to  $20,000,000  (in  total,  a  payment  of  approximately  $1,750,Q00), 
and  would  need  to  make  lai'ger  monthly  interest  payments. 

u.  On  or  about  February  1,  2018,  Cohen  emailed  Sterling  Employee-3  and  proposed 
"[pjayment  of  $1.250m  which  ALL  can  be  used  to  pay  down  principal,  if  [Sterling]  will  waive 
past  due  amounts,”  but  stated  “I  do  NOT  have  more  than  the  $l.25Qm.”  (Emphasis  in  original.) 
Cohen  also  stated,  in  sum  and  substance,  that  he  had  insufficient  financial  resources  to  post 
additional  collateral  or  pre-ftmd  monthly  payments.  The  signature  block  on  the  email  indicated 
that  Cohen’s  address  was  the  address  for  Subject  Premises-2.  Based  on  my  participation  in  an 
interview  with  Sterling  Employee-3,  I  have  learned  that  since  January  30,  2018,  Sterling  has 
continued  to  renegotiate  the  medallion  loans  with  Cohen  based  on  Cohen’s  repi'esentations  about 
his  cuiTent  financial  position.  In  particular,  according  to  Sterling  Employee-3,  Cohen  and  Sterling 
have  an  agreement  in  principal  to  restructui'e  Cohen’s  loans  based  in  part  of  Cohen  s  agreement  to 
make  a  principal  payment  of  approximately  $750,000,  to  make  a  payment  of  $500,000  to  become 
current  on  interest  payments,  and  to  post  $192,000  in  cash  collateral  for  his  future  monthly 
payments  on  the  loan.  Cohen  also  agreed  to  pledge  an  interest  he  had  in  a  properiy.  Sterling 
Employee-3  has  stated  that  had  Cohen  indicated  he  had  more  than  $1,250,000  available  to  him. 
Sterling  would  have,  among  other  things,  negotiated  for  a  larger  reduction  to  the  principal  amount 
of  the  loan. 
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(ii)  Cohen  Made  Material  Misrepresentations  About  His  Finances  to  Banks 
from  Sterling  andMekose  Cash  Derived  fi-om  Consulting  Woric 
17.  As  set  forth  in  detail  below,  despite  multiple  written  and  oral  representations  by 
Cohen  to  Sterling  (and,  by  extension,  Mehose^^)  that  he  had  insuffieient  funds  to  pay  down  the 
principal  balance  of  the  medallion  loans,  make  monthly  interest  payments,  or  pay  past-due 
amounts,  it  appears  that  between  2016  and  the  present,  Cohen  opened  and  maintained  banlc 
accounts  at  Fkst  Republic  Banlc  (“First  Republic”),  and  then  received  millions  of  dollars  m 

-e0nsulting-paymeiitsinthese,accounts,jgMQh.M  d^^^  not  disclose  to  Steriing.  Cohen  set  up  these 

accounts  and  received  these  funds  during  the  very  period  in  which  he  made  disclosures  to  Sterling 
about  his  personal  finances  (including  his  assets  and  liabilities)  and  his  ability  to  malce  payments 
on  the  medallion  loans.  In  these  disclosm-es  to  Sterling— and  despite  being  asked  about  these  banlc 
accounts  by  his  accountant-Cohen  misled  the  banlc  by  claiming  he  had  insufficient  liquidity  to 
satisfy  his  obligations  or  meet  the  banlc’s  demands,  while  withholding  information  about  these 

ongoing  revenue  streams  and  liquid  financial  assets  at  First  Republic. 

18.  Specifically,  based  on  my  review  of  documents  and  banlc  records  produced 
pursuant  to  a  subpoena  by  First  Republic,  and  my  participation  in  and  review  of  reports  of 
intei-viewswith  a  First  Republic  sales  manager  (“FirstRepubllc  Employee-1”)  and  aFnstRepublic 
senior  managing  director  (“First  Repubhc  Employee-2”),  I  have  learned,  among  other  things,  the 


following: 


“Based  on  my  review  of  a  report  of  an  interview  eonducted  with  m  employee  of  MAose,  I 
have  learned  that,  pursuant  to  the  participation  agreement  between  Sterling  md  Mehose,  Cohen 
ta“temelte  and  other  records  in  Sterling’s  possession  were  forwarded  to  Mel|||j||. 
Mekose  could  malce  a  deteimination  as  to  whether  to  approve  of  the  Cohen- 
transaction.  Based  on  my  review  of  reports  of  interviews  wjjjyjekoseemployees,  1  also  know 
that  Cohen  called  employees  at  Mekose  regaining  the  Cohen^^^^Hi'ansac  ion. 
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a.  Cohen  and  his  wife  have  been  customers  of  First  Republic  since  approximately 
June  2011.  Cohen  cont-ols  several  checking  and  loan  accounts  at  First  Republic,  some  in  his  own 
name  and  others  in  the  names  of  corporate  entities.  According  to  Fkst  Republic’s  Imow-yom- 
customer  records  on  Cohen,*’  his  primary  physical  address  is  the  addi'ess  for  Subject  Premises-1. 

b. .  On  or  about  October  26,  2016,  in  Manhattan,  New  York,  Cohen  opened  a  new 
checking  account  at  Fkst  Republic  in  the  name  of  Essential  Consultants  LLC  (the  “Essential 
Consultants  Account”).  Cohen  was  the  only  authorized  signatory  on  the  account.  According  to 
account  opening  documents,  the  primary  address  for  Essential  Consultants  LLC  was  the  address 

for  Subject  Premises-1.  When  Cohen  opened  the  Essential  Consultants  Account,  Fkst  Republic 
Employee-1  conducted  an  in-person  interview  of  Cohen.  In  response  to  a  series  of  know-your- 
customer  questions  about  the  purpose  of  the  account— the  answers  to  which  First  Republic 
Employee-1  entered  into  a  form*^^ — Cohen  stated,  in  sum  and  substance,  that  he  was  opening 
Essential  Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting 
work,  and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States. 
Cohen  also  stated,  in  sum  and  substance,  that  his  purpose  in  setting  up  the  account  was  to  keep  the 
revenue  from  his  consulting  business — ^which  he  said  was  not  his  main  source  of  income  sepai'ate 
from  his  personal  finances.  As  set  forth  below,  there  is  probable  cause  to  believe  that  Cohen’s 
statements  about  the  intended  pmpose  of  the  account  and  source  of  funds  for  the  accormt  were 
false.  Specifically,  as  described  below,  the  account  was  not  intended  to  receive — ^and  does  not 


17  Qertain  financial  institutions  are  requk'ed  to  conduct  such  procedures  pursuant  to  the  Bank 
Secrecy  Act  and  its  implementing  regulations.  See  3 1  U.S.C.  §  53 1 8;  3 1  CJF.R.  §  1020.220. 

**  First  Republic  Employee-1  first  filled  out  the  form  on  the  day  he  interviewed  Cohen,  October 
26,  2016.  On  or  about  December  19,  2016,  at  the  request  of  banlc  compliance  personnel,  Fkst 
Republic  Employee-1  updated  the  form  to  add  more  detail  about  Cohen  s  statements. 

24 


2017.08.02 


Case  l:18-cr-00602-WHP  Document  48-2  Filed  07/18/19  Page  126  of  201 


appear  to  have  received-money  in  connection  with  reai  estate  consulting  work;  in  addition,  the 

account  has  received  substantial  payments  from  foreign  soui-ces. 

c.  I  Imow  from  my  review  of  First  Republic  bank  records  that  were  scheduled  by  an 

FBI  forensic  accountant  that  after  Cohen  opened  the  Essential  Consultants  Account.  Cohen 
received  payments  into  that  account  ftom  foreign  businesses  and  entitles  that  do  not  reflect  the 

statedolientprofilefor  the  residential  and  eonuneieiaheal-estate  consulting  services.  Spe^^^^ 

fiom  my  review  of  the  Essential  Consultants  Account  schedule  and  public  souiees.  I  know  the 

Mfowifrg:  -  —  —  ^ 

i.  Beginning  on  or  about  January  31,  2017,  Cohen  began  receiving  monthly 

payments  of  $83,333  into  the  Essential  Consultants  Account  from  an  entrty  called  Columbus  Nova 

LLC.Accordingto public  sources,  Columbus Novaisanlnvestmentmanagementfnm  controlled 

by  Renova  Group,  an  industrial  holding  company  based  in  Zurich.  Switzerland  that  is  controlled 
by  Russian  national  Viktor  Vekselberg.  From  January  2017  to  August  2017,  the  Essential 
Consultants  Account  received  seven  payments  totaling  $583,332.98  from  Columbus  Nova  LLC. 

ii.  Beginning  on  or  about  April  5.  2017,  dre  Essential  Consultants  Account 
began  receiving  payments  from  Novartis  Investments.  SARL,  which  I  believe  to  be  the  in-house 
financial  subsidiary  of  the  Swiss  pharmaceutical  company  Novartis  Internattonal  AG  (  Novartrs  ). 
Between  April  2017  and  Febrrrary  2018.  the  Essential  Consultants  Account  received  eleven  wu-e 
payments  from  a  Swiss  banlc  account  held  in  the  name  of  Novartis,  each  in  the  amount  of  $99,980. 

for  atotal  of  $1^099,780. 

iii.  Begmning  in  or  about  April  20 17,  the  Essential  Consultants  Account  started 
receiving  wire  payments  from  a  banlc  account  associated  with  the  telecommunications  company 
AT&T  Inc.  (“AT&T”).  Specifically,  on  or  about  April  14,  2017,  AT&T  sent  $100,000  to  the 
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Essential  Consultants  Account  and,  from  in  or  about  June  2017  to  in  or  about  January  2018,  the 
Essential  Consultants  Account  received  ten  $50,000  payments  fr'om  AT&T.  In  total,  AT&T  sent 

$600,000  to  the  Essential  Consultants  Account. 

iv.  On  or  about  May  10, 2017,  June  9,  2017,  July  10, 2017,  and  November  27, 
2017,  the  Essential  Consultants  Account  received  four  deposits  in  the  amount  $150,000  (totaling 
$600,000)  from  a  bank  account  in  South  Korea.  The  account  holder  from  which  the  money  was 
sent  is  Korea  Aerospace  Industries  Ltd.  (“ICAI”).  I^  is  a  South  Korea-based  company  that 
produces  and  sells  fixed-wing  aircraft,  helicopter  aircraft,  and  satellites  to  the  United  States 

Department  of  Defense,  among  other  customers. 

V.  On  or  about  May  22,  2017,  the  Essential  Consultants  Account  received  a 
$150,000  deposit  from  an  account  at  Kazkommeitsbanlc,  a  Kazalchstani  bank.  The  listed  account 
holder  at  ICazkommertsbank  was  a  second  Kazalchstani  banic  named  BTA  Bank,  AO.  A  message 
accompanying  the  wfre  payment  indicated  that  the  payment  was  a  “monthly  consulting  fee  as  per 
friv  BTA-101  DD  May  10,  2017  consulting  agreement  W/N  DD  08  05  2017  CNTR  W/NDD 
08/05/2017.” 

vi.  In  total,  from  on  or  about  January  31, 2017  to  on  or  about  February  1, 2018, 
the  Essential  Consultants  Account  received  approximately  $3,033,112.98  in  transfers  and  checks 
from  the  aforementioned  entities.  As  of  on  or  about  January  10, 2018,  the  balance  in  the  Essential 
Consultants  Account  was  $1,369,474.23.  Cohen’s  withdrawals  from  the  Essential  Consultants 
account  reveal  that  it  was  used  for  largely  personal  purposes,  includingto  pay,  among  other  things, 
American  Express  bills  and  fees  from  “the  Core  Club,”  a  private  social  club  in  New  York. 

d.  On  or  about  April  4,  2017,  Cohen  opened  another  new  checldng  account  at  First 
Republic,  this  one  in  the  name  of  Michael  D.  Cohen  &  Associates,  P.C.  (the  MDC&A  Account  ). 
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Cohen  was  the  only  authorized  signatory  on  the  aeoount.  According  to  account  opening 
documents,  the  primary  address  tor  MDC&A  Account  was  the  address  for  Subject  Premises-1. 
Among  other  things,  the  MDC&A  Account  i-eceived  ten  whe  transfers  and  one  check  from  an 
account  in  the  name  of  Squire  Patton  Boggs,  a  law  firm.  As  noted  above,  Subject  Promises-2  is 
located  inside  the  New  York  office  of  Squire  Patton  Boggs.  In  total,  torn  on  or  about  April  5, 
2017,  to  on  or  about  January  2, 2018.  the  MDC&A  Account  received  $426,097.70  In  deposits,  and 
die  balance  in  the  account  as  of  lanuaiy  2.  2018.  was  $344,541.35.  As  discussed  below,  Cohen 

neverdisclosed  any- of-th^balance-in-the. EssentLaLCim.sS!!fants^ 

during  the  negotiations  with  respect  to  the| 


^^^^|:ansaction  or  the  subsequent  loan 
refinancing  negotiations,  including  in  his  May  2017  Financial  Statement  and  September  2017 

Financial  Statement. 

19.  Based  on  my  review  of  emails  that  were  seized  pursuant  to  the  Cohen  Email 
Warrant,  and  my  review  of  reports  of  interviews  with  employees  of  AT&T  and  Novartis,  it 
appears  that  the  aforementioned  payments  to  the  Essential  Consultants  Account  and  MDC&A 
Account  were  for  political  consulting  work,  including  consulting  for  international  clients  on  issues 
pending  before  the  Trump  administration.  Specifrcally.  from  my  review  of  emails  frpm  the  Cohen 
Gmail  Account,  the  Cohen  MDCPC  Account,  and  public  sources,  I  have  learned  the  followmg: 

a.  On  or  about  April  28,  2017,  Cohen  sent  an  email  to  an  individual  whom  I  beheve 
is  affrliated  witli  KAI,  In  the  email.  Cohen  attached  a  “Consulting  Agreement”  between  ICAI  and 
Essential  Consultants  dated  as  of  about  May  I,  2017.  The  agreement  indicates  that  Essentiaf 
Consultants  had  the  address  of  Subject  Premises-2.  The  document  indicates  that  Essential 
Consultants  would  render  “consulting  and  advisory  services,  as  requested”  by  KAI,  and  that  KAI 
would  pay  Essential  Consultants  “a  consulting  fee  of  One  Million  Two  Hundred  Thousand 
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($1,200,000.00)  US  Dollars,”  disbursed  through  eight  $150,000  installments  between  May  2017 
and  December  2017.  I  have  also  reviewed  invoices  in  amounts  of  $150,000  that  Cohen  emailed 
to  an  individual  whomi  believe  is  affiliated  widiM,  At  the  top  of  the  invoices  the  address  listed 

for  Essential  Consultants  is  the  address  for  Subject  Premises-2. 

b.  On  or  about  May  8, 2017,  Cohen  sent  an  email  to  an  individual  whom  I  beheve  is 

affiliated  with  BTA  Bank.  The  signatoe  block  on  Cohen’s  email  listed  “Essential  Consultants 
EEC”  and  “Michael  D.  Cohen  &  Associates,  PC”  and  provided  the  address  for  Subject  Premises 

2-lDth^email7eohemattaehed-adoeument-puiportingio_be_aACmLSultin 

BTA  Banlc  and  Essential  Consultants  dated  as  of  about  May  8, 20 17.  The  agreement  indicates  that 
Essential  Consultants  had  the  addi-ess  of  Subject  Premises-2.  The  document  indieates  that 
Essential  Consultants  would  render  “consulting  and  advisory  seiwices”  to  BTA  Bank,  and  that 
BTA  Bank  would  pay  Essential  Consultants  “a  consulting  fee  of  One  MiUion  Eight  Hundi-ed 
Thousand  ($1,800,000.00)  US  Dollars,”  disbursed  through  monthly  payments  of  $150,000.  On  or 
about  May  10, 2017,  Cohen  sent  an  email  to  an  employee  of  BTABanlc,  and  attached  to  the  email 
an  invoice  to  BTABanlc  in  the  name  ofEssential  Consultants,  with  the  address  of  SubjectPremises- 
2.  The  invoiee  contemplated  a  $150,000  payment  to  Essential  Consultants  for  a  “monthly 

eonsuMng  fee.” 

e.  On  or  about  January  23,  2017,  Cohen  appears  to  have  entered  into  a  eonsultmg 
agi-eement  with  AT&T,  which  contemplates  that  Essential  Consultants  “shall  render  consultng  and 

advisory  services  to  [AT&T]”  andthatAT&Twould“advise  [Essential  Consultantsjofthose  issues 

and  matters  with  respeetto  which  AT&T  Services  desires  [Essential  Consultants] ’s  assistance  and 
adviee.”  The  agreement  indicates  that  Essential  Consultants  had  the  addi'ess  of  Subject  Premises- 
1.  The  contract  calls  for  AT&T  “to  pay  tlie  Consultant  for  his  services  ...  a  consulting  fee  of  Fifly 
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Thousand  ($50,000)  Dollars  .  .  .  per  month.”  Based  on  my  review  of  reports  of  interviews  with 
AT&T  employees,  I  have  learned  that  AT&T  retained  Cohen  to  consult  on  political  issues, 

including  net  neutrality,  the  merger  between  AT&T  and  Time  Warner,  and  tax  reform. 

d.  On  or  about  March  1,  2017,  Cohen  appears  to  have  entered  into  a  contract  between 

Novartis  and  Essential  Consultants,  which  provides  that  Essential  Consultants  will  “provide 
consulting  and  advisory  services  to  Novartis  on  matters  that  relate  to  the  repeal  and  leplacement  of 
the  Affordable  Care  Act  in  the  US  and  any  other  issues  mutually  agi'eeable  to  [Essential 

-Consultants]  and  Novaife.tt^The-contract  pi-rtvLd^fo  a  “consult^^ 

Hundi-ed  Thousand  ($1,200,000)  US  dollar's,”  to  be  paid  to  Essential  Consultants  in  equal  monthly 
installments  over  the  course  of  a  year.  Based  on  my  review  of  reports  of  intei-views  with  Novartis 
employees,  I  have  learned  thatNovartis  retained  Cohen  to  provide  political  consulting  semces  and 

to  gain  access  to  relevant  policymalcers  in  the  Trump  Administration. 

e.  In  or  about  February  2017,  Cohen  began  negotiating  the  terms  of  a  “strategic 
allianoe”  wift  Squire  Patton  Boggs.  On  or  about  March  4.  2017,  Squhu  Patton  Boggs  enuuled 
Cohen  a  “strategic  alUanoe  agreement,”  Under  the  terms  of  the  agreement,  Cohen  agreed  to 
generate  business  for  the  law  firm,  and  Squire  Patton  Boggs  agreed  to  pay  to  Cohen  “an  annual 
strategic  alUanee  fee  of  $500,000,  payable  in  twelne  (12)  equal  monthly  installments.”  Squire 
Patton  Boggs  also  agreed  to  provide  Cohen  with  “dedicated  and  segregated  office  space  in  [Squtte 
Patton  Boggs’s]  New  York  and  Washington  D.C,  offices,  whieh  office  space  shall  be  physically 
separate  from  [Squire  Patton  Boggs’s]  offices  and  have  locked  doors  and  its  own  locked  file 
cabinets.”  On  or  about  April  3,  2017,  Squfce  Patton  Boggs  announced  on  its  website  that  is  had 
fonned  a  “strategic  alliance”  with  Michael  D.  Cohen  &  Associates  and  would  “jointly  represent 

clients.” 
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20.  Despite  the  significant  amount  of  money  that  Cohen  received  into  the  Essential 
Consultants  Account  and  the  MDC&A  Account,  and  the  cash  balance  in  both  accounts,  Cohen  did 

notdiscloselhatinformationtoSterlingorMelrose.  Specifically,  based  on  my  review  of  documents 

provided  by  Geteel  (as  noted  above,  Cohen’s  accountant  at  the  time),  my  paiticipation  in  an 
interview  with  Getzel,  and  my  review  of  notes  and  ^ 

have  learned  the  following: 

a.  In  or  about  May  2017,  Getzel  met  with  Cohen  at  Subject  Premises-2.  At  the 

meeting^Cohen-told- Getzel,- in  smn- and- substance,  that  heJiM.MP^P-gJgwpiactmecay.edMich^g^^ 

D.  Cohen  &  Associates  P.C.,  and  a  consulting  company  called  Essential  Consultants  LLC.  Cohen 
told  Getzel,  in  sum  and  substance,  that  he  expected  to  earn  $75,000  per  month  in  connection  with 
his  lawpractice,  and  that  he  expected  gross  revenues  for  the  consulting  business  to  be  between  five 

and  six  million  dollars  annually. 

b.  In  or  about  October  2017,  if  not  earlier,  Getzel  was  prepaiing  a  personal  financial 
statement  for  Cohen.  On  or  about  October  6, 20 17,  Getzel  sent  an  email  to  Cohen  in  which  Geteel 
wrote  that  “[ajttached  is  a  draft  of  the  new  PFS  as  of  September  30, 2017”  and  attached  a  draft  of 
the  September  2017  Financial  Statement.  The  di'aft  statement  reflected  that  as  of  September  30, 
2017,  Cohenhad  only  $1,250,000  in  cash,  total  assets  of  approximately  $33,430,000  (comprised  of 
taxi  medallion  interests,  real  estate  interests,  and  his  personal  residence  and  property),  and  liabilities 
of  approximately  $45,630,000,  leaving  him  purportedly  over  $12  million  in  debt.  Inthe  same  email, 
Getzel  questioned  Cohen,  in  sum  and  substance,  about  the  fact  that  the  financial  statement  did  not 
list  any  value  associated  with  either  the  Essential  Consultants  Account  or  the  MDC&A  Account: 
“[w]e  did  not  add  any  value  for  you[r]  two  operating  entities  -  Michael  D.  Cohen  &  Associates 
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POO  M  and  Esaenlial  Consultants  LLC.  Please  advise  whether  or  not  these  should  be  disclosed 
and  what  value.” 

0.  On  or  about  October  6, 2017.  Cohen  called  Qetzel  by  telephont^vdrich  is  reflected 
on  toll  records  for  Cohen’s  cellphone^d  told  Geteel,  in  sunt  and  subshutce.  no.  to  include 
Essential  Cons„Kan«  or  MDC&A  in  the  September  2017  Financial  Stoternent  because  toey  had  no 
value.  On  or  about  October  6,  2017,  following  the  call  with  Getzel.  Cohen,  using  the  Cohen 
Account,  responded  to  Gael’s  email  with  the  answer  “[Hooks  good  to  me."  Cohen  never  directed 
Getoel  to  mage  ansr-ebanges  to  his  cash  -positiomasjisted.  in  the^eptom!^  Financial 

Statoment  In  a  le««  dated  October  6. 2017.  addressed  to  Getuel.  Cohen  stated.  “I  have  reviewed 
Are  attached  stetement  of  financial  condition  and  find  it  to  be  correct  and  consistent  wito  the 
representations  that  1  made  to  your  firm.  The  attached  is  an  accurate  reflection  of  toy  assete, 
liabilities  and  net  worth  (deficit)  as  of  September  30.  2017.”  Attached  to  that  letter  was  the 
September  2017  Financial  Statement,  which,  as  noted  above,  was  then  transmitted 

connection  with  the proposed  taximedallion  transaction  between  Sterling,  Cohen.  anr^^B 

21.  Based  on  my  review  of  a  report  of  an  interview  with  Sterling  Employee-1, 1  have 
learned  drat  Cohen  did  not  disclose  his  income  stteam  fiorn  Essential  Consultants  to  Sterling 
Employee-1  or,  to  his  knowledge,  anyone  else  at  Sterling.  Accordmg  to  Sterlrng  Employee  1, 
lorowledg.  of  such  an  income  stream  would  have  affected  Sterling’s  demands  during  tire 
negotiations,  particularly  with  respect  to  the  amount  of  a  principal  paydown  of  Cohen’s  debt. 

rnltifsn  T  Tnde,r.stated  His  Available  Cash 

22.  In  addition  to  wlthltoldlng  the  existence  of  his  Essential  Consultants  Income  fl-om 

Sterling  and  Melrose,  it  appears  that  Cohen  also  substantially  understated  his  available  cash  and 
cash  equivalents  in  his  financial  disclosures.  Specifically.  I  know  torn  my  review  of  the  September 
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2017  Financial  Statement  that  Cohen  provided  to  Sterling  that  Cohen  repiesented  that  he  had 
$1^50,000  in  cash  as  of  September  30, 2017.  I  also  know  that  on  or  about  January  30, 2018.  in  a 
•  telephone  oaU  wite  Sterlmg  Employee-3,  and  on  February  1.  2018,  hr  an  email  to  Sterlhrg 

Employee-3.  Cohenrepresentedthathedidnot  have  mo, eth.n$l,250.000  in  cash.  Bua-ommy 

review  of  a  sumnraty  of  bank  records  that  were  scheduled  by  forensic  accountants,  I  have  learned 
that  Cohen  had  approximately  $5,000,000  in  cash  and  cash  equivalents  as  of  September  30, 2017. 
Additionally,  as  of  Febr-uaty  1,  2018,  Cohen  had  approximately  $6,000,000  in  cash  and  cash 

e,uival<mte-rSpedfically.frommyreviewoftheaccountschedri^^ 

the  following: 

a.  Cohen  has  three  checking  and/or  savings  accounts  at  Capital  One  Bank,  one  of 
which  is  in  his  wife’s  name.  As  of  September  30.  2017,  Cohen  had  $1,105,680.35  in  his  savings 
account,  and  $1,262,982.29  in  total  in  the  three  accounts  at  Capital  One  Bank.  As  of  February  1, 
2018,  Cohen  hadatotal  of  $1,389,245.78  in  these  accounts. 

b.  Cohen  has  three  accounts  at  Morgan  Stanley  in  his  name.  As  of  September  30, 

2017.  the  combined  total  in  cash  and  cash  equivalents  in  those  three  accounts  was  $1,270,600.41. 
As  of  Febmary  1.2018.  Cohen  had  $1,284,996.13  in  these  accounts. 

c.  AsofSeptember30,2017,Cohenhad$260,689.18inanaccountatSignatureBank. 

As  of  February  1,2018,  Cohen  had  $261,517,55  in  this  account. 

d.  In  addition  to  the  Essential  Consultants  Account  and  MDC&A  Account  at  First 

Republic,  Cohen  alsohadtwojointehecking  accounts  withLaur.aCohenatFWRepublic.Intotel. 

as  of  September  30, 2017,  Cohen  had  at  least  $1,876,209.27  in  total  in  his  four  accounts  at  First 
Republic.  As  of  February  1. 2018.  Cohen  had  $3,332,992.95  in  these  accounts. 
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e.  Cohen  has  an  account  at  Bethpage  Credit  Union  with  $25,931.39  in  it  as  of 
September  30^  2017. 

f.  As  of  September  30, 2017,  Cohen  had  $17,542.54  in  accounts  at  Sterling. 

g.  Cohen  has  two  accounts  at  TD  Banlc— one  in  his  name  and  one  held  jointly  with  his 

wife.  Cohen  also  has  a  safety  deposit  box  at  TDBank~SubjectPremises-3.  The  safety  deposit 

box  was  opened  on  December  13, 2017  in  the  names  of  Michael  and  Laura  Cohen. 

h.  In  total,  as  of  September  30, 2017,  Cohen  had  at  least  $4,713,935.08  in  his  accounts 

at-Capital  One  Banlt,-City^National  Banlc,  Signato^MTl£»Stei4ing^^^^ 

First  Republic,  and  Morgan  Stanley.  As  of  Febmaiy  1,  2018,  Cohen  had  $6,268,732.59  m  his 
accounts  at  Capital  One  Bank,  City  National  Banlc,  Signature  Banlc,  First  Republic,  and  Morgan 

Stanley. 

23.  Accordingly,  based  on  the  foregoing,  it  appeal's  that  Cohen’s  written  and  oral 
representations  to  Sterling  and  Melrose  that  he  did  not  have  more  than  $1,250,000  were  false,  and 
that  Cohen  withheld  information  regarding  approximately  $5  miUion  in  funds  fi'om  Sterling  and 
Meh'ose  in  order  to  secure  favorable  terms  in  his  renegotiation  of  his  medallion  loan.  Based  on 


my  participation  in  an  interview  with  Sterling  Employee-2,  and  my  review  of  reports  of  interviews 
with  Sterling  Employee-1  and  two  Mehose  employees,  it  is  my  understanding  that  that  Sterling 
and  Meh'ose  would  view  Cohen’s  understating  of  his  assets  as  material  to  its  decision  whether  to 


renegotiate  Cohen’s  medallion  loans  and  on  what  terms,  or  to  its  decision  whether  approve  of  the 
transfer  of  those  loans  tol 


Based  on  my  review  of  the  account  schedules  described  above,  I  Icnow  Aat,  as  of  ^ate  of  this 
affidavit,  the  Jccount  balances  for  TD  Bank  have  not  yet  been  included  m  *0  schedule  for  orthei 
date  and  the  account  balances  for  Sterling  National  Banlc  and  Bethpage  Credit  Umon  have  notyet 
been  included  in  the  schedule  for  February  1,  2018.  Urns,  to  the  extent  that  these  accounts  have 
positive  balances,  Cohen’s  total  balances  in  fact  were  even  higher  on  these  dates. 
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Cohen  Fas  Tin  reported  Interest  Income 

24,  It  appears  that  Cohen  also  hid  from  Sterling  interest  income  that  he  was  receiving  in 
connection  with  a  six  million  dollar  loan  he  made  to  another  individual.  Specifically,  I  know  from 
my  review  of  the  May  2017  Financial  Statement  and  September  2017  Financial  Statement  that 
Cohen  provided  to  Sterling  that  Cohen  did  not  disclose  that  he  had  made  a  note  receivable  in  the 
amount  of  approximately  $6  million,  or  that  he  was  earning  approximately  $60,000  per  month  in 
interest  income  in  connection  with  that  loan.  But,  from  my  review  of  a  summary  of  bank  records 
that  were  reviewed  by  another  law  enforcement  agent,  my  review  of  property  records  and 

documents  obtained  pursuant  to  the  Cohen  Email  W^arrants,  and  my  participation  in  an  interview 
with  Getzel,  I  have  learned  the  following: 

a.  Based  on  my  review  of  property  records,  I  have  leartred  that  on  or  about  March  12, 

Cohen  approximately 

$2,000,000.^®  It  appears  that  the  promissory  note  was  unsecured  by  any  real  property.  On  or  about 
April  28,  2014,  Cohen  anc^^^^Jamended  the  promissory  note,  and  restructured  the  loan  to 
increase  the  principal  amount  to  approximately  $5,000,000.  Under  the  terms  of  the  amended 
promissory  note,  the  loan  was  secured  by|||^^^^^|ipartment  in  Sunny  Isles  Beach,  Florida.  On 
or  about  April  8, 2015,  Cohen  and^^^Jestated  the  promissory  note  to  increase  the  principal 
amormtto  $6,000,000.^* 

b.  Based  on  my  review  of  a  copy  of  the  restated  note,  which  was  obtained  pursuant  to 
the  Cohen  Email  Warrants,  I  have  learned  that  under  the  terms  of  the  amended  and  restated 


I  learned  from  Getzel  thall 


The  note  states  that  the  loan  is 
jointly  and  severally.  For  ease  of  reference,  I  refer  simply  tol 
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p,.omlsso.7  n*.  Cohen'S  loan  tc^gis  an  in..:es.-only  loan,  and  tha.  fte  principal  balance 
of  the  loan  beant  interest  at  an  annual  rate  of  12.25  percent.  I  also  Itnowte^amended  and 
restated  promissory  note  includes  a  schedule  of  paytuenb  that  require  pay  Cohen 

approximately  $61,250per  month  beginning  in  April  2015  and  ending  in  April  2019.  The  note  also 

requires  thal^H°P'>y 

o.  Based  on  my  review  of  bank  records,  I  have  learned  that,  consistent  with  the  terms 
of  the  amended  and  restated  promissory  note.^^^^as  made  monthly  paymente  of 
~;ippSlmately$6-t;25 

hyCapltalOneBank.Ihavelem-nedtha.f.omApril  201510  October  2015,  Cohenr^lvedchecks 

$61,250  per  month,  which  he 

fL-om  an  entity  called 

deposited  intohis  personal  bankaccount  at  capital  one  Bardca^ltappears  tommy  teviewof  bank 

records  and  public  soui-ces  that^^^|is  the  oAvner  of 

From  my  review  of  records  maintained  by  Capital  One  Banlq  1  have  also  learned  that  since  October 

totaling 

2015,  Cohen  has  i-eceived  checks  from  an  entity  ca 

$61,250  per  month,  which  he  deposited  into  his  personal  bank  account  at  Capital  One  Bank.  It 
appears  tom  my  review  of  banlc  records  and  public  sources  that^^Bs  also  the  owner  of  r| 

In  total,  it  appears  that  Cohen  receives  approximately  $735,000  per  yeai 

in  interest  payments  fron:^^^^^| 

d.  Based  on  my  review  of  Cohen's  May  2017  and  September  2017  Financial 

Statements, my  review  ofhls2015and2016tax  returns  obtained  via  subpoena  andtomthe  Cohen 

Email  Wan-ants,  and  my  participation  in  an  interview  with  Geteel,  I  have  learned  that  Cohen  drd 


a  pro-mted  payment  For  all  months  thereafler,  the  total  payment 
eq!:iX  W  butSHoften  made  toe  payment  in  multrple  checks. 
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not  disclose  this  interest  income  he  was  receiving  fror^^^^^^;o  Sterling  or  Mehose,  or  list  it 
on  his  tax  returns.  I  have  also  learned  that  while  this  interest  income  is  taxable,  Cohen  did  not  tell 
Getzel — his  accountant — ^about  the  income,  and  Getzel  only  learned  about  the  income  because  he 
began  doing^^^^^^| taxes  in  2017.^^ 

25.  Accordingly,  based  on  the  foregoing,  it  appears  that  Cohen’s  representations  to 

Sterling  and  Meh'ose  that  he  did  not  have  more  than  $1,250,000  were  false,  and  that  Cohen 
withheld  information  relating  to  the  interest  income  he  is  receiving  from  in  order  to 

secui'e  favorable  terms  in  his  renegotiation  of  his  medallion  loan. 

Cohen  Had  a  Side  Agreement  With 

26.  As  set  forth  in  detail  below,  during  the  course  of  Cohen’s  negotiations  to  sell  his 

interest  in  taxi  medallions  and  the  associated  debt  to  Cohen  not  only 

misrepresented  his  financial  position  to  Sterling,  but  also  failed  to  disclose  a  side  agi-eementhe 
had  negotiated  with^^^^^^|t  appeal's  tha^^^^^^^igreed  to  pay  an  above-market  price 
for  Cohen’s  taxi  cab  medallions,  and  in  exchange,  Cohen  agreed  to  pay  approximately 

$3.8  million  in  cash.  Specifically,  from  my  review  of  documents  produced  pursuant  to  a  subpoena 
by  Sterling,  and  my  paificipation  in  intei-views  with  Sterling  Employee- 1,  Sterling  Employee-2, 
and  Sterling  Employee-3, 1  have  leai-ned,  among  other  things,  the  following: 

a.  Oh  or  about  September  5, 2017,  an  executed  teim  sheet  was  ckculated  by  Sterling 
Employee-1  to  Cohen  and^^^^^^^^^|  The  term  sheet  listed  Cohen  s  addiess  as  the  addiess  foi 
Subject  Premises-1.  According  to  the  term  sheet,  would  borrow  $20,000,000 

fi'om  Sterling  and  Melrose,  to  be  secured  by  the  medallions  tha^^^^^^ivas  to  acquire  from 


23  Accordingly,  this  interest  incom^which  should  have  been  reported  as  such  on  Cohen’s  tax 
returns — ^is  included  herein  in  calculations  of  Cohen’s  true  cash  position. 

36 


2017.08,02 


Case  l:18-cr-00602-WHP  Document  48-2  Filed  07/18/19  Page  138  of  201 


Cohen.  At  a  price  of  $20  ntillion  for  thirty-two  taxi  medallions,  the  proposed  transaction  valued 
each  medallion  as  worth  $625,000.  The  term  sheet  also  contemplated  a  $1,265,913  pay-down  of 
the  principal  balance  of  the  loan.  The  term  sheet  made  no  mention  of  a  $3.8  milhon  payment  from 
Cohen  to  “"T  hansaotlon  between  the  parties. 

b.  Additionally,  an  internal  Sterling  credit  memorandum.  date^rtobe^Ol?. 
describing  theterms  ofthe  Cohen-^^Bransaction  and  the  new  loan  to^|^H‘‘“' 
not  mention  any  payments  fmm  Cohen  .o^^mcluding  a  $3.8  million  payment.  The 

-TihSSrahdunralsotBted-that-the-loan-amom^^ 

nredallion”  but  “it  is  recognized  tat  this  is  not  in  line  with  eutrent  market  values.”  Indeed, 
ae^rding  to  an  internal  Sterling  memorandum  dated  Februmy  5.  2018.  in  ta  month  of  Janua^ 

2018.1atd medallions soldforamountsrangingfrom$120,000to $372,000.  Aeeordingto Sterling 

Employee-1  and  Sterling  Employee-2,  they  were  never  told  that 


Lgreed  to  a  purchase 

price  of  $625,000  in  exchange  for  a  lump  sum  payment  from  Cohen,  oi  that  Cohen  w 

e.  On  or  about  January  30,  2018.  Sterling  Employee-3  aslced  Cohen  whether  Cohen 

,  . .  „av  sum  of  money  for  entering  into  the 

had  a  side  agreement  with 

medaiuon  tnmsaetion.  Sterling  Employee-3  asked  Cote^t  such  an  arrangement  because, 
according  to  Sterling  Empioyee-3.  the  price  tat  ^^was  paying  for  each  medallion 
appeared  to  be  well  above  the  market  price.  Cohen  state^n«d  substance,  that  he  had  no 

side  agreement— ttnd  never  had  a  side  agreement— 

27,  Whhe  Cohen  and  ^^^^lld  not  disclose  any  payment  from  Cohen  to 

communications  with  Steriing,  it  appears  tat  such  a  payment  was  contemplated. 

indeed,  based  on  my  review  of  recotds  maintained  by  Getzel,  and  my  participation  in  an  interview 
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wift  Geteel,  I  have  learned  the  following,  in  substance  and  in  part,  regarding  dte  proposed  side 

payment  from  Cohen  to 

a.  On  or  about  September  19.  2017,  Oetzel  prepared  a  memorandum  for  Cohen 
entitled,  “Sale  of  NYC  Medallion  Entities  and  Debt  Assumption”  (the  Getzel  Memorandnn^r 
The  Getzel  Memorandum  summaiized  the  proposed  tiansaction  between  Cohen  and^^H 
in  part,  as  follows;  “Michael  and  Laura  Cohen  wUl  tiansfet  ownership  of  their  13  NYC  medallion 
entities  to  a  Buyer  who  will  assume  then  bank  indebtedness,  upon  the  [Cohens’]  paying  down  the 

’-diRpgfbhooftlirtS-ehtittes-by-SSOO.QOOandnm^  - 

b.  According  to  Getzel,  Cohen  told  him  the  parameters  of  the  deal,  inelnding  the 
payment  of  $3,800,000  to^^|  b"*  O'®"' 

$3,800,000  to  pay^^l  As  noted  above,  Cohen  had  mom  than  $5,000,000  in  cash  and 
cash  equivalents  as  of  September  2017,  but  had  only  disclosed  in  his  September  2017  Financial 

Statement  that  he  had  $  1 .25  million  in  cash. 

28.  Based  on  my  review  of  records  maintained  by  Sterling  (as  well  as  Mekose,  the  banlc 
withttie  partoipating  interest  in  foe  loans)  and  reports  of  inteiviews  ofmpiesentatives  of  Sterling 
(and  Melrose),  I  have  seen  no  evidence  that  Sterling,  Mehose,  or  any  other  flnanclal  institution 
involved  in  foe  potential  deal  with  Cohen  and  ^^was  awate  of  the  planned  $3.8  million 

side  payment  from  Cohen 

The  Illegal  Campaign  Contribution  Scheme 

29.  The  USAO  and  FBI  ar  e  also  investigating  a  criminal  violation  of  campaign  fmanee 

laws  by  Michael  Cohen.  As  set  forth  below,  there  is  probable  cause  to  believe  that  Cohen  made 


medamons  appear  to 

together  owned  sixteen  corporations,  which  in  turn  owned  32  taxi  medall  . 
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an  excessive  in-kind  contribution  to  the  presidential  election  campaign  of  then-candidate  Donald 
Trump  in  the  form  of  a  $1 30,000  payment  to  Stephanie  Clifford,  an  individual  who  was  rumored 
to  have  had  an  extramaiital  affair  with  Trump,  in  exchange  for  her  agreement  not  to  disclose  that 
alleged  affair.  As  set  forth  below,  there  is  probable  cause  to  believe  that  this  payment  was  intended 
to  keep  Clifford  fi’om  making  public  statements  about  the  rumored  affak  on  the  eve  of  the  2016 
presidential  election,  and  thus  constitutes  a  campaign  contribution  in  excess  of  the  applicable  limit 

30.  From  my  review  of  public  sources,  I  have  learned  the  following: 

a.  In  or  around  October  2011,  there  were  rumors  published  on  the  gossip  websites 
TheDirty.com  that  Trump  had  had  an  extramarital  affah  with  Clifford,  an  adult  film  actress  whose 
screen  name  is  Stormy  Daniels,  in  or  around  July  2006.  In  or  about  October  2011,  Life  &  Style 
Magazine,  a  tabloid  sold  in  supermarkets,  also  published  an  article,  based  on  the  report  in 
TheDirty.com,  alleging  an  affair  had  occmred  between  Tramp  and  Clifford,  Both  Trump  and 
Clifford,  through  their  representatives,  issued  denials  in  response  to  the  aiticles. 

b.  Specifically,  on  or  about  October  1 1 , 20 1 1 ,  Keith  Davidson,  who  identified  himself 
as  Clifford’s  attorney,  sent  a  cease  and  desist  letter  to  TheDirty.com,  demanding  that  the  article 
regarding  Trump  and  Clifford  be  removed  from  the  website.  Additionally,  on  or  about  October 
12,  2011,  Cohen,  who  was  then  Executive  Vice-President  and  Special  Counsel  to  the  Trump 
Oi'ganization,  stated  to  E!  News  that  “[t]he  totally  untrae  and  ridiculous  stoiy  . . .  emanated  fiom 

a  sleazy  and  disgusting  website _ The  Tramp  Organization  and  Donald  J.  Trump  will  be  bringing 

a  lawsuit .  .  .  [and]  Mi-.  Trump  and  the  Tramp  Organization  would  like  to  thank  and  commend 
Stormy  Daniels  and  her  attorneys  for  their  honesty  and  swift  actions.” 

31.  On  or  about  June  16,  2015,  Tramp  formally  launched  his  2016  presidential 
campaign.  On  or  about  May  4, 2016,  Trump  became  the  presumptive  Republican  Pai-ty  nominee 
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for  pi-esident.  and  on  July  19, 2016.  Trump  offioially  became  the  nominee.  Based  on  my  review 
of  public  sources.  I  have  learned  that  while  it  does  not  appear  that  Cohen  had  an  official  Utle  as 
part  of  the  Trump  campaign,  on  multiple  occasions  Cohen  made  public  statements  on  behal 
Trump  or  his  campaign.  For  insUmee.  on  or  about  August  18. 2016,  Cohen  appeared  on  CNN  to 

defend  Tramp’s  polling  numbers. 

32.  On  or  about  October  7, 2016,  The  Washington  Post  published  online  a  video  and 
accompanying  audio  in  which  Trump  referred  to  women  in  what  the  article  described  as  •‘vulgar 

-femB”-iinr200Sconversation-with-Bllly-Bush,-who*asJhentbehostrf^^ 

following  day,  on  October  8,  2016,  Trump  appeared  in  a  video  in  which  he  stated,  among  other 
dungs,  'Tve  said  and  done  things  I  regret  and  words  released  today  on  this  more  than  a  decade  old 
video  are  one  of  them.  Anyone  who  knows  me  knows  these  words  don’t  reflect  who  I  am.  I  said 
it  I  was  wrong  and  1  apologize.”  Based  on  my  review  of  public  sources,  I  also  know  that 
representatives  of  the  Trump  Campaign  stated,  in  sum  and  substance,  that  the  Access  Hollywood 
comment  was  an  old  and  isolated  incident. 

33.  Based  on  my  review  of  public  sources,  including  an  article  published  in  S 
magazine  by  a  reporter  who  interviewed  Clifford,  I  have  learned  that  areund  this  same  time,  in  or 
about  October  2016,  Clifford  was  in  discussions  with  ABC’s  Good  Morning  America  show  and 
Slate  magazine,  among  other  media  sources,  to  provide  these  media  outlets  with  her  statement 
about  her  aUeged  relationship  with  Trump.  Aecording  to  the  article  in  Slate,  which  the  author 
based  on  conversations  with  Clifford  over  the  telephone  and  by  text  message,  Clifford  wanted  to 
be  paid  tor  her  story  or  be  paid  by  Trump  not  to  disclose  her  accusation.  As  Cohen  summarized 

ina2018emaU  obtained  pursuant  to  the  CohenEmaUWarrantsr  “In  October2016,lwas  contacted 
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by  counsel  for  Ms.  Clifford  stating  that  news  outlets,  including  ABC  News,  were  pursuing  the  20 1 1 
story  of  an  alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.” 

34.  From  my  review  of  telephone  toll  records^^  and  information  produced  pursuant  to 
the  iCloud  WaiTant  and  Cohen  Email  Warrants,  I  have  learned  that  in  the  days  following  the  Access 
Hollywood  video,  Cohen  exchanged  a  series  of  calls,  text  messages,  and  emails  with  Keith 
Davidson,  who  was  then  Clifford’s  attorney,  David  Pecker  and  Dylan  Howai’d  of  American  Media, 
Inc.  (“AMI”),  the  publisher  of  the  National  Enquirer, Trump,  and  Hope  Hicks,  who  was  then 
press  secretary  for  Trump’s  presidential  campaign.  Based  on  the  timing  of  these  calls,  and  the 
content-  of  the  text  messages  and  emails,  I  believe  that  at  least  some  of  these  communications 
concerned  the  need  to  prevent  Clifford  from  going  public,  particularly  in  the  wake  of  the 
Hollywood  story.  In  particular,  I  have  learned  the  following; 

a.  On  October  8, 20 1 6,  at  approximately  7 ;20  p.m.,  Cohen  received  a  call  from  Hicks. 
Sixteen  seconds  into  the  call.  Trump  joined  the  call,  and  the  call  continued  for  over  four  minutes. 
Based  on  the  toll  records  that  the  USAO  has  obtained  to  date,  I  believe  that  this  was  the  first  call 


^  My  attribution  of  certain  telephone  numbers  to  certain  individrrals  as  described  in  this 
affidavit  is  based  on  my  review  of  the  vCard  (virtual  contact  file)  and  text  messages  obtained  ffom 
Cohen’s  telephone  pui'suant  to  the  iCloud  War-rant. 

Pecker  is  President  of  AMI  and,  according  to  his  own  statements  in  public  reports,  a  personal 
friend  of  Trump.-  Howard  is  the  chief  content  officer  of  AMI,  who  according  to  public  records 
reports  directly  to  Pecker. 

2’  I  believe  that  Trump  joined  the  call  between  Cohen  and  Hides  based  on  my  review  of  toll 
records.  Specifically,  I  Icnow  that  a  call  was  initiated  between  Cohen’s  telephone  number^  and 
Trtjmp’s  telephone  number  at  the  same  time  the  records  indicate  that  Cohen  was  talking  to  Hicks. 
After  the  Cohen-Trump  call  was  initiated,  it  lasted  the  same  period  of  time  as  the  Cohen-Hicks 
call.  Additionally,  the  toll  records  indicate  a  “-1”  and  then  Trump’s  telephone  number,  which, 
based  on  my  tr-aining  and  experience,  means  that  the  call  was  either  transferred  to  Trmtrp,  or  that 
Trump  was  added  to  the  call  as  a  conference  or  three-way  call  participant.  In  additiori,  based  on 
my  conversations  with  an  FBI  agent  who  has  interviewed  Hides,  I  have  learned  that  Hicks  stated, 
in  substance,  that  to  the  best  of  her  recollection,  she  did  not  leam  about  the  allegations  made  by 
Clrlford  until  ear-ly  November  2016.  Hicks  was  not  specifically  asked  about  this  thr-ee-way  call. 
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Cohen  had  received  or  made  to  Hicks  in  at  least  mtdtiple  weeks,  and  drat  Cohen  tmd  Trump  spoke 
about  once  a  month  prior  to  this  date  -  speciflcally,  prior  to  this  call  on  October  8.  20 16,  Cohen 
and  Tttunp  had  spoken  once  in  May,  once  in  June,  once  in  July,  zero  times  in  August,  and  twice 

in  September. 

b.  Approximately  ten  minutes  alter  the  call  ended.  Hides  and  Cohen  spoke  again  for 
about  two  minutes. 

c.  At  7:39  p.m.,  immediately  after  the  second  call  with  Hicks  ended,  Cohen  called 

-TiiiviaPecker(asnoted-aboverthe^Piesidentof-AjneticanJliedialno,,orAMQandthey_c^^^^^ 

for  fthty  seconds.  Approxunately  four  minutes  later,  Cohen  called  Pecker  again  and  they  spoke 
for  more  Hum  a  minute.  Three  minutes  after  ending  his  call  with  Pecker.  Cohen  received  a  call 
fi-om  Dylan  Howard  (as  noted  above,  the  Chief  Content  Officer  of  AMI),  and  they  spoke  for 
approximately  a  minute.  According  to  toU  records,  it  does  not  appear  that  Cohen  and  Howard 
spoke  regularly  prior  to  October  8, 20 1 6.  as  it  had  been  over  a  month  since  die,  had  called  each 

other. 

d.  At  7:56  p.m..  approximately  eight  minutes  after  his  call  with  Howard  ended.  Cohen 
called  Hicks  and  they  connected  for  two  minutes.  At  approximately  the  same  time  this  caU  ended, 
Cohen  received  a  call  from  Pecker,  and  they  spoke  for  about  two  minutes.  At  8:03  pun.,  about 
tluee  minutes  after  ending  his  call  with  Pecker,  Cohen  called  Ttump,  and  they  spoke  for  nearly 

eiglit  minutes. 

e.  At  8:39  pun.  and  8:57  p.m.,  Cohen  received  caUs  from  Howard  and  spoke  to  him 
for  about  fom-  and  six  minutes,  respectively.  At  9:13  p.m.,  about  ten  minutes  after  Cohen  and 
Howard  hung  up  fi-om  the  second  of  these  calls.  Howard  sent  Cohen  a  text  message  that  said: 
■•Keith  wUl  do  it.  Let's  reconvene  tomorrow.”  Based  on  my  involvement  in  this  investigatiorr.  I 
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believe  that  when  Howarf  wtnte  "Keift  ”  he  was  tefetting  to  Keith  Davidson,  ft.  attorney  for 
Stephanie  Clifford,  At  3:31  a.m,  now  on  October  9. 2016,  Cohen  sent  Howard  a  text  message  in 

response  that  said:‘Thanlcyon.->  Eight  minutes  later.  Cohen  sentHowardaftxtmessageftat  said 

..Resolution  Con^nts  LLC.  is  the  name  of  the  entity  I  formed  a  week  ago.  Whenever  you  wake. 

please  call  luy  celL” 

£  Thefollowingday.onOotoberlO,2016.atlO:58a.m..Howaldsentatextmessage 

to  Cohen  and  Davidson,  which  stated:  “KeitWMichael:  connecting  you  both  in  regards  to  that 

-business  opportuni^.-Spoke-to-the-client-ftis-AM-and,fteylre,^^^^^  with  the 

opportunity.  Thanks.  Dylan.  Over  to  you  two.”  At  12:25  p.m.,  Davidson  sent  Cohen  a  text  message 

that  stated:  .‘Michael  „  if  we  are  ever  going  to  close  this  deal  -  In  my  opmion, 

Keith.”  Davidson  and  Cohen  ften  spoke  by  phone  tor  about  three  minutes.  Based  on  my 
parucipation  in  this  investigation.  I  believe  ftat  when  HowaM  wrote  ftat  fte  ..clienC  was 
“confirmed  to  proceed  with  the  opportunity,”  he  was  refen-ing  to  Clifford’s  agieement  in  prmclple 
to  accept  money  ^om  Cohen  in  exchange  for  her  .^cement  not  to  d^ct.s  any  prior  affair  with 

then-candidate  Tramp.^* 

g.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  Warrants.  I 
lorowftat  on  or  about  October  10. 2016,  Clifford  andDavidson  appearto  have  signed  a  “side  letter 
agreemenf  that  suited  it  was  an  exhibit  to  a  “confidential  settlement  agmement  and  mutual 
mlease”  betw^  “Peggy  Peterson”  and  “David  Dennison.”  The  purpose  of  fte  document. 


3*  As  set  forth  below,  W  was  also 

However,  because  ftesecomm^cationsvreiein^^^^^^  P  the 

fte  negotiation  of  a  pa^^t  to  communications  were  related  to  aifford. 

payment  of  money  to  Cliffoid,  I  statements  by  McDougal,  I  have  learned  that  she 

^4oSS' ‘J;  a^mertTitTISlI  several  months  prior  to  these  communications  between  Cohen 
and  Pecker,  Howard,  and  Davidson. 
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according  to  the  agreement,  was  to  define  the  “tme  name  and  identity”  of  persons  named  by 
pseudonym  in  ^‘confidential  settlement  agreement  and  mutual  release*  The  side  letter  agieement 
specifies  the  identity  of  “Peggy  Peterson”  to  be  Clifford,  but  the  space  for  “Dennison’s”  identity 
is  blank.  The  agreement  also  includes  a  signature  page  for  “Peterson,  TDennison,  and  theii 
attorneys.  The  signature  page  is  signed  by  “Peterson”  and  his  attorney,  Davidson,  but  the 
document  is"  unsigned  by  “Dennison”  and  his  attorney.  Based  on  my  involvement  in  this 
investigation,  I  believe  that  Davidson  sent  Cohen  this  partially-signed  “side  letter  agreement  in 
order  to  facilitate  the  closing  of  a  deal  betv^een  Davidson’s  client  and  Cohen  oi  his  client  on 

October  10, 2016. 

35.  It  appears  that  on  October  13,  2016,  and  the  days  that  followed,  Cohen  took  steps 
to  complete  a  transaction  with  Davidson,  including  attempting  to  open  an  account  from  which 
Cohen  could  transfer  funds  to  Davidson,  Specifically,  from  my  review  of  toll  records,  infoimation 
obtained  pursuant  to  the  iCloud  WaiTant  and  Cohen  Email  Warrants,  records  maintained  by  First 
Republic,  as  well  as  my  participation  in  interviews  with  First  Republic  employees,  I  have  learned 
the  following: 

a.  On  the  moining  of  October  1 3, 2016,  at  8:54  a.m,,  Cohen  sent  Pecker  a  text  message 
that  stated:  “I  need  to  tallc  to  you,”  At  9:06  a.m.,  Pecker  sent  a  text  message  to  Cohen  that  stated, 
“I  called  please  call  me  back  ”  The  tolls  between  Cohen  and  Pecker  do  not  show  a  telephone  call 
between  8:54  a,m,  and  9:06  a.m.  However,  based  on  my  review  of  text  messages,  I  have  learned 
that  Cohen  and  Pecker  communicate  with  each  other  over  Signal,  which  is  an  encrypted 
communications  cellphone  application  that  allows  users  to  send  encrypted  text  messages  and  make 
encrypted  calls. 
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b.  At  9:23  a.m..  Cohen  sent  an  email  that  stated  “call  me”  to  First  Republic  Employee- 
2.  The  email  attached  documents  h  orn  the  Secretary  of  State  of  Delaware  indicating  that  Cohen 
had  formed  a  limited  liability  company  called  “Resolution  Consultants  LLC”  on  September  30, 
2016.  As  noted  above,  “Resolution  Consultants”  is  the  name  of  the  entity  that  Cohen  had  told 
Howard  he  had  formed  recently  tdter  Howald  said  Davidson  would  “do  it.”  At  10:44  a.m.,  Cohen 
called  First  Republic  Employee-2  and  told  him,  in  sum  and  substance,  that  he  needed  an  account 
in  the  name  of  •Resolution  Consultants”  opened  immediately,  and  that  he  did  not  want  an  address 

lSWaecBwntten-out-ofthe-account^tater-thatday,.anotfaeroempIoy^^ 


emailed  Cohen  account  opening  paperwork  to  complete.  Cohen  returned  the  ac«.unt  opening 
documents  partially  completed,  but  tailed  to  provide  a  copy  of  his  driver’s  license  or  passport,  and 
did  not  respond  to  the  employee’s  question  of  how  he  wanted  to  fund  the  account.  As  a  result,  the 

account  was  never  opened. 

c.  On  October  17, 2016.  Cohen  incorporated  Essential  Consultants  LLC  in  Delaware. 

That  same  day,  he  filed  paperwork  to  dissolve  Resolution  Consultants  LLC. 

36.  Despite  these  steps  taken  by  Cohen,  it  appears  that  the  negotiation  between  Cohen 
and  Davidson  was  not  progressing  sufficiently  fast  enough  for  Davidson  or  his  client,  CUfford, 
and  they  threatened  to  go  public  with  Clifford’s  allegations  just  days  before  the  presidential 
election.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the 

iCloud  Warrant,  and  public  sources,  I  Icnow  the  following: 

a.  According  to  an  article  in  The  Washington  Tost,  which  quoted  emails  sent  Horn 

Cohen’semailaecounthostedbythe  Trump  Orgatuaation,  on  Octob«17.2016.Davidsonemailed 

Cohen  and  threatened  to  cancel  the  aforementioned  “settlement  agreement”  by  the  end  of  the  day 
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if  Cohen  did  not  complete  the  transaction According  to  the  article.  Davidson  sent  Cohen  a 
second  email  later  in  the  day  that  stated  in  part,  “Please  be  advised  that  my  client  deems  her 
settlement  agreement  canceled  and  void.”  At  4-.00  p.m.  that  day,  Cohen  called  Davidson  and  they 

spoke  for  over  five  minutes. 

b.  Cohen’s  4:00  p.m.  call  with  Davidson  and/or  Davidson’s  threats  to  cancel  the 
“settlement  agi-eement”  appear  to  have  touched  off  a  flurry  of  communications  aboutthe  settlement 
agreement  and  whether  Clifford  would  go  public.  Specifically: 

_ - ■■  ^.,^4.43„p_t3ay^Howard-senDCohen  .a 

they’re  going  with  DailyMail.  Ai-e  you  aware?”  One  minute  later,  Cohen  responded:  “Call  me.” 
Based  on  my  involvement  in  this  investigation,  I  understand  Howaifl’s  text  to  mean  that  he  heard 
that  Clifford  was  going  to  take  her  stoiy  of  an  exhamarital  affair  with  Trump  to  the  Daily  Mai , 

tabloid  newspaper. 

ii.  At  4:45  p.m.,  Howard  called  Cohen  and  they  spoke  for  over  two  minutes. 

Moments  later,  Davidson  and  Cohen  spoke  for  about  two  minutes. 

hi.  At  5:03  p.m.,  Cohen  attempted  to  call  Trump,  but  tlie  call  only  lasted  eight 

seconds.  This  was  Cohen’s  first  call  after  he  spoke  with  Davidson. 

iv  At  5:25  p.m.,  Cohen  texted  Howard,  stating:  ‘Well??? 

V.  At  6:44  p.m,,  Howard  responded  to  Cohen’s  text,  stating:  Not  taking  my 

oallc.”  Cohen  responded  one  minute  later:  “You’re  Iddding.  Who  me  you  trying  to  teach?” 
Howard  r^ponded  one  minute  later:  “The  ‘agent’”  Based  on  my  involvement  in  this 


29  Due  to  the  partially  covert  natoe  of  the  investigation  to 
documents  fi’om  the  Trump  Organization  or  Davidson, 
referenced  in  this  article. 


this  date,  the  USAO  has  not  requested 
and  thus  does  not  possess  the  email 
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investigation,  I  understand  Howard’s  text  messages  to  mean  that  he  attempted  to  contact  Davidson 
about  the  matter  involving  Clifford,  but  that  Davidson  was  not  taking  Howai-d’s  calls. 

vi.  At  6:49  p.m.,  Cohen  called  Howai'd  and  they  spoke  for  neai’ly  four  minutes, 

c.  The  following  day,  on  October  18,  2016,  TheSmokingGun.com,  a  website  that 
publishes  legal  documents  and  mugshots,  published  an  ai-ticle  called:  “Donald  Trump  and  the  Pom 
Superstar,”  which  alleged  that  Tmmp  had  an  extramarital  affair  with  Clifford.  However,  the 
article  noted  that  Clifford  had  declined  to  comment. 

_  _ Gn-oi^about  October  25,^2016,  the._CQmnmnications  AetwggP, Cohen,  Davi^^^^ 

Howai’d  and  Pecker  picked  up  again,  apparently  concerning  a  transaction  involving  Clifford. 

Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  theCohenEmail 

Wairants  and  iCloud  Warrant,  as  well  as  my  review  of  public  sources,  I  have  learned  the  following: 

a.  On  October  25,  2016,  at  6:09  p.m.,  Howard  sent  Cohen  a  text  message  stating: 
“Keith  calling  you  urgently.  We  have  to  coordinate  something  on  the  matter  he’s  callmgyou  about 
or  its  [sic]  could  look  awfully  bad  for  everyone.”  One  minute  later,  Davidson  sent  Cohen  a  text 
message  stating  “Call  me.”  Cohen  and  Davidson  called  each  other  several  tunes  over  the  next  half 
hour  but  appeal-  not  to  have  connected.  At  6:42  p.m.,  Cohen  and  Davidson  spoke  for  about  eight 

minutes.  At  7:11  p.m.,  they  spoke  for  another  two  minutes. 

b.  The  next  morning,  on  or  about  October  26, 2016,  at  8:26  a.m.,  Cohen  called  Trump 
and  spoke  to  him  for  approximately  thi-ee  minutes.  At  8:34  a.m.,  Cohen  caUed  Trump  again  and 
connected  for  a  minute  and  a  half. 

c.  At  approximately  9 : 04  a.m. — less  than  thh1y  minutes  after  speaking  with  Trump 
Cohen  sent  two  emaUs  to  tlie  peison  who  had  incoiporated  Resolution  Consultants  and  Essential 
Consultants  for  him,  and  stated  “ean  you  send  me  asap  tlie  filing  i-eceipf  ’  and  then,  in  the  second 
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email,  “for  Essential  Consultants  LLC Thatperson  responded  with  the  filing  receipttwo  minutes 
later  at  9:06  a.m.  and  with  the  certification  of  formation  23  minutes  later,,  at  9:27  a.m. 

d.  Shortly  after  that,  Cohen  contacted  First  Republic  Employee-2  and  told  him,  in  sum 
and  substance,  that  he  decided  not  to  open  an  account  in  the  name  of  “Resolution  Consulting”  and 
instead  would  be  opening  a  real  estate  consulting  company  in  the  name  of ‘'Essential  Consultants.” 
Cohen  told  First  Republic  Employee-2  that  he  was  at  Tmmp  Tower,  and  wanted  to  go  to  a  First 
Republic  branch  across  the  street  to  open  the  account,  so  First  Republic  Employee-2  called  First 

Republic-Empleyee-^l^a-preferred- banlcer^at Thalbimch». Cohen.  At  1 1  -OO^a.m.,  Ffts^ 

Republic  Employee-1  called  Cohen.  I  loiow  from  my  participation  in  an  interview  with  First 
Republic  Employee-1,  that  areund  the  time  of  the  call  he  went  to  Cohen’s  office  in  Trump  Towel— 
on  the  same  floor  as  the  Trump  Organization— and  went  through  account  opening  questions, 
including  loiow  your  customer  questions,  with  Cohen,  ha  response  to  a  series  of  know-yom- 
customer  questions  about  the  puipose  of  the  account-the  answers  to  which  Fkst  Republic 
Employee-1  entered  into  a  foim— Cohen  stated,  in  sum  and  substance,  that  he  was  openmg 
Essential  Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consultmg 
work,  and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States. 
Based,  on  my  review  of  records  obtained  ft'om  First  Republic,  it  appeal's  that  this  account  (the 
“Essential  Consultants  Account”)  was  created  at  a  time  between  1 1 :00  a.m.  and  1 :00  p.m. 

e.  At  1:47  p.m.,  Cohen  called  Davidson  and  they  spoke  for  approximately  two 
minutes.  At  approximately  1 :49  p.m.,  Davidson  emailed  Cohen  wiring  instructions  for  an  attorney 
client  trust  account  at  City  National  Banlc. 

f  After  the  Essential  Consultants  Account  was  opened  on  October  26,  2016,  Cohen 
transferred  $131,000  from  a  home  equity  line  of  credit  that  Cohen  had  at  First  Repubhc  to  the 
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EssentW  Consultants  Account.  Following  the  transfer,  at  approximately  4:15  p.in.  on  October  26, 
2016,  First  Republic  Employee-2’s  assistant  emailed  Cohen  at  his  Trump  Organization  email 
addiiss  te  tell  hhn  tat  the  fends  had  been  deposited  into  the  Essential  Consultants  Account. 
Cohen  forwarded  that  email  to  the  Cohen  Gmail  Account  and  then  forwarded  it  to  Davidson. 

g.  At  6:37  p.m.,  Cohen  asked  Pecker  by  text  message.  Can  we  speak,  Important. 
Cohen  called  Pecker  at  6:49  p.m.  and  connected  for  thiity  seconds.  At  6:57  p.m.,  Cohen  sent 
Howard  a  text  message,  stating:  “Please  call  me.  Impoitant.”  Cohen  called  Howaid  at  7:00  p.m. 

for  nearly  thirteen  minutes.  At  7:24  p.m.,  Howard  sent  a  text  message  to  Cohen  tat:  “He  said 
he-d  caU  me  back  in  20  minutes.  I  told  him  what  you  are  asking  for  his  [sic]  reasonable.  Fll  get 
It  sorted.”  Approximately  an  hour  later,  at  8:23  p.m..  Howaid  told  Cohen  by  text  message  to 
“check  your  Gmail  for  email  feom  my  private  account.”  In  an  email  sent  at  8:23  p.m.  by  Howaid 
to  Cohen  and  Davidson,  with  the  subject  line  “Confirmation.”  Howard  stated,  “Thank  you  both 
for  chatting  with  me  earlier.  Confuming  agreement  on:  -  Executed  agreement  hand-signed  by 
Keith’s  client  and  refemed  via  overnight  or  same-day  FedEx  to  Michael.  -  Change  of  agreement 
to  reflect  the  correct  LLC,  -  Transfer  offends  on  Thursday  AM  to  be  held  in  escrow  until  receipt 
of  agreement.”  Aftei-  receiving  tat  email,  at  approximately  827  p.m.,  Cohen  asked  Howaid  by 
text  message,  “Can  you  and  David  [Pecker]  give  me  a  call.”  Howaid  promptly  responded:  “David 
is  not  around  I  think.  ITl  caU.”  At  8:28  p.m..  Howaid  caUed  Cohen  and  they  spoke  for  three 

minutes. 

38.  On  October  27. 2016,  Cohen  made  a  payment  to  Davidson  of  $130.000-withthe 
funds  intended  for  ClHord-for  the  puipose  of  securing  her  ongoing  silence  with  respect  to  the 
allegations  that  she  had  an  extramarital  affair  with  Trump.  SpecificaUy.  based  on  my  review  of 
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toll  records,  bank  records,  and  mformation  obtained  pnrsuant  to  the  iCloud  Wan-ant  and  Cohen 

Email  Warrants,  I  have  learned  the  following: 

a.  At  9:47  a.m.,  Cohen  sent  Davidson  an  email,  stating:  “Keith,  landly  confnm  that 

wire  received  today,  October  27,  2016  shtdl  be  held  by  you  in  your  attorney’s  trust  account 

until  such  time  as  directed  for  release  by  me,  in  writing.  Additionally,  please  ensure  that  all 

paperwork  contains  the  correct  name  of  Essential  Consultants  LLC.  I  thank  you  m  advance  for 

youl-  assistance  and  look  foi-ward  to  heai'ing  fiom  you  later.” 

- b.  wkt-approxiniately40-:01-a.m.,-accordinglo.  resold^  provided  by  Firs^Rep^^_ 

Bank,  Cohen  completed  paperwork  to  wire  $130,000  horn  the  Essential  Consultants  Account- 
which  had  been  fcnded  a  da,  prior  from  Cohen^s  home  equity  line  of  credit-Ao  the  attorney  client 
trust  account  at  City  National  Banlc  that  Davidson  had  specified  in  the  wirmg  insUuchons  he  sent 

to  Cohen.  The  wire  transfer  was  made  shortly  thereafter. 

o.  At  10:02  a.m.,  Davidson  responded  to  Cohen’s  email  from  9:47  a.m.,  stating:  “I 

couflnn  that  I  will  work  in  good  faith  &  tlrat  no  funds  shall  be  disbursed  unless  &  until  the  plaintiff 
pemonall,  signs  all  necessary  settlement  paperwork,  (the  form  of  which  will  match  the  prior 
agreement).  The  settlement  does  will  nmne  the  correct  corporation,  (Essential  Consultants  LLC). 
Plaintiff’s  signature  will  be  notarized  and  returned  to  you  via  FedEx,  Only  after  you  receive  FedEx 

will  I  disburse.  Fan?” 

d.  At  10:50,a.m.,  First  Republic  Employee-1  sent  Cohen  an  email  confirming  that  the 

payment  had  been  sent  and  providing  him  with  the  wue  number. 

39.  On  October  28,  2016,  and  the  days  lliat  followed,  Cohen  finalized  the  ttansaction 

with  Davidson.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pmsuant 

to  the  iCloud  Warrant,  public  sources,  and  banlc  records,  I  Icnow  the  following. 
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a.  On  October  28, 2016,  at  1 1:48  a.m.,  Cohen  spoke  to  Ti-ump  for  approximately  five 
minutes.  Beginning  at  1:21  p.m.,  Cohen  attempted  a  series  of  phone  calls  to  Davidson,  Pecker, 
and  Howard  thi-oughout  the  day,  although  it  appeal's  he  may  only  have  connected  with  Howard. 

b.  Later  that  day,  at  approximately  7:01  p.m.,  Davidson  stated  to  Cohen  by  text 
message  that  “all  is  AOK.  I  should  have  signed,  notai'ized  docs  on  Monday.  You  should  have 
them  on  Tuesday.”  Cohen  thanlced  him  and  said  “I  hope  we  are  good.”  Davidson  responded,  “I 
assure  you.  We  are  very  good.”  Howai'd  also  texted  Cohen  at  7:08  p.m.,  “Keith  pavidson]  says 

-we  are  good--Cohen-then^responded^-‘QK^’-to-HQward,andAm^^  to  DMidsgn^.At 

approximately  10:30  p.m.,  Cohen  spoke  to  Hicks  for  three  minutes. 

c.  On  October  31,  2016,  Cohen  called  Howard  at  8:22  p.m.  and  they  spoke  for  over 
ttoee  minutes.  At  8:32  p.m.,  Cotan  received  text  messages  from  both  Howard  and  Davidson. 
Howard  said:  “You’ll  have  paperwork  tomonow  says  KD,”  Davidson  said:  ‘  We  ace  AOK.  You 
will  be  receiving  a  package  tomorrow.”  Cohen  responded  “Thadt  you”  to  Howard  and  “Thanks 
Keith,  wm  call  you  then”  to  Davidson.  From  my  involvement  in  this  investigation,  I  believe 
Davidson  was  referring  to  a  signed  nondisclosure  agreement  when  he  told  Cohen  that  he  would 

receive  a  paclcage. 

d.  Based  on  my  review  of  court  filings  that  became  public  in  20 18, 1  have  learned  that 
on  or  about  October  28,  2016,  “EC,  LLC  and/or  David  Dennison”  entered  into  a  “confidential 
settlement  agreement  and  mutual  release”  with  “Peggy  Peterson,”  pursuant  to  which  “Peterson- 
agreed  not  to  disclose  certain  “confidential  information  peitaining  to  pennison]”  in  exchange  for 
$  130,000.  The  agreement  provided  that  “EC,  LLC”  would  wire  the  funds  to  “Peterson's”  attorney, 
who  would  then  transfer  funds  to  “Peterson.”  Cohen  signed  the  agreement  on  behalf  of  “EC, 
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LLC.”  The  agreement  stated  that  the  address  for  “EC,  LLC,”  which  was  later  referred  to  in  the 
agreement  as  “Essential  Consultants,  LLC,”  was  Cohen’s  residence. 

e.  Consistent  with  the  “confidential  settlement  agreement  and  mutual  release,”  on  or 
about  November  1,  2016,  Davidson  transferred  $96,645  &om  his  attorney  client  trust  account  at 
City  National  Bank  to  a  bank  account  in  Clifford’s  name.  The  wire  had  the  annotation  “net 
settlement.”  On  the  same  day,  at  approximately  9:48  a.m.  Davidson  sent  Cohen  a  text  message 
with  a  picture  of  a  FedEx  delivery  confirmation,  stating  that  at  approximately  9:09  a.m.  a  package 
shipped  by  Davidson  the  previous  day  had  arrived  for  Cohen  at  his  Trump  Organization 
address.  On  the  same  day,  at  approximately  6:14  p.m.,  Davidson  sent  Cohen  an  email  with  an 
audio  file  attached  and  said  “Give  this  a  lesson  [sic]  and  then  call  me.”  The  audio  attachment  was 
titled  “Stormy .mp3”  and  was  a  five-minute  recording  of  Davidson  interviewing  Clifford  about 
recent  public  allegations  made  by  an  adult  film  stai-  named  Jessica  Drake  regarding  her  alleged 
past  affair  with  Trump;  in  the  recording,  Clifford  explained  the  reasons  she  believed  that  Drake 
was  not  credible.  Less  than  an  hour  later,  at  approximately  7:05  p.m.,  Cohen  called  Trump,  but  it 
appears  that  they  did  not  connect.  Cohen  then  called  a  telephone  number  belonging  to  Kellyanne 
Conway,  who  at  the  time  was  Trump’s  campaign  manager.  They  did  not  coimect.  At 
approximately  7:44  p.m.,  however,  Cohen  received  a  return  call  from  Conway,  which  lasted  for 
approximately  six  minutes. 

40.  On  November  4, 2016,  just  three  days  after  the  Clifford  transaction  was  completed 
and  just  four*  days  before  the  presidential  election,  the  Wall  Sti-eet  Journal  published  an  article 
alleging  that  the  National  Enquirer  had  “Shielded  Donald  Trump”  from  allegations  by  Playboy 
model  Karen  McDougal  that  she  and  Trump  had  an  affair.  The  article  alleged  that  AMI  had  agreed 
to  pay  McDougal  to  bm-y  her  story.  McDougal,  lilce  Clifford,  had  been  represented  by  Davidson. 
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Based  on  my  review  of  toll  records,  information  obtained  parsuant  to  the  Cohen  Email  Warrants 
and  iClond  Warrant,  and  public  sources,  it  appears  that  Cohen  spoke  fequently  to  Davidson, 
Howard,  Pecker,  and  Hicks  around  the  time  of  this  article’s  pubUcationHust  days  before  Election 
Day-urboutthe  importance  of  pl’eventing  the  McDougal  and  Clifford  stories  from  gaining  naUonal 

traction.  Specifically,  I  have  learned  the  following: 

a.  Between  4:30  and  8:00  p.m.  on  November  4,  Cohen  communicated  several  times 

with  Howard,  Pecker  and  Davidson.  For  instance,  at  approximately  4:49  p.m,  Cohen  sent  Howard 

a  texfmessage-with-a-sereenshot-of-an-emaiLforwardeAtoJli^^  Trump  Organirato^ 

lawyer.  The  forwarded  email  was  from  a  Wall  Street  Jotimal  reporter,  and  asked  for  comment 
from  Trump  and/or  the  campaign  on  the  story.  Cohen  also  spoke  with  Hicks  several  times, 
including  shortly  before  and/or  after  calls  with  Pecker,  Howard  and  Davidson.  Indeed,  at 
approximately  7:33  p.m,  usingtwo  different  cellphones  subscribed  to  him,  Cohen  appearstohave 

been  talking  to  Davidson  and  Hicks  at  the  same  time. 

b.  At  approximately  8:51  p.m,  Cohen  sent  Howard  a  message,  stating:  “She’s  being 

really  difficult  with  giving  Keith  a  statement  Basically  went  into  hiding  and  unreachable.”  One 
minute  later,  Howard  responded:  “I’ll  ask  him  again.  We  just  need  her  to  disappear.”  Cohen 
responded,  “She  definitely  disappeared  but  refuses  to  give  a  statement  and  Keith  cannot  push  her.” 
At  approximately  8:55  p.m,  Howard  respondedto  Cohen’s  text:  “Let’s  letthe  dust  settle.  Wedon’t 

want  to  pushherover  the  edge.  She’son  side  at  present  and  we  haveasolidpositionandaplausrble 

position  that  she  is  rightfully  employed  as  a  columnist.”  Based  on  my  involvement  in  this 
investigation,  I  believe  Cohen  and  Howard  were  referring  to  Karen  McDougal  when  they  were 
discussing  “she”  and  “her.”  Additionally,  I  believe  Howard’s  statement  that  “we  have  ...  a 
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plausible  position  that  she  is  rightfully  employed  as  a  columnist”  was  a  reference  to  the  fact  that 
AMI  had  given  McDougal  payments  for  her  role  as  a  pm-ported  columnist  for  the  company. 

c.  At  approximately  8:58  p.m,  on  November  4,  2016,  Howai'd  attempted  to  reassure 
Cohen  about  the  effect  of  the  forthcoming  Wall  Street  Journal  article,  texting,  I  think  it  11  be  ok 
pal.  I  think  it’ll  fade  into  the  distance.”  Cohen  responded,  “He’s  pissed.”  Howard  wrote  back, 
“I’m  pissed!  You’re  pissed.  Pecker  is  pissed.  Keith  is  pissed.  Not  much  we  can  do.”  Based  on 
my  involvement  in  this  investigation,  I  believe  Cohen  was  i-efeiting  to  Trump  when  he  stated  he  s 
pissed.”  Cohen  asked  Howard  at  approximately  9:00  p.m.  how  the  Wall  Street  Journal  could 
publish  its  article  if  “everyone  denies.”  Howard  responded,  “Because  there  is  the  payment  fiom 
AMI.  It  looks  suspicious  at  best.” 

d.  At  approximately  9:03  p.m.,  Hicks  called  Cohen  and  they  spoke  for  two  minutes. 
At  approximately  9:11  p.m.,  Cohen  called  Howard  and  spoke  to  him  for  five  minutes.  At 
approximately  9:15  p.m.,  Hicks  called  Cohen  and  they  spoke  for  neai-ly  seven  minutes.  Again, 
Cohen  used  different  phones  for  these  two  calls,  such  that  he  appeai-s  to  have  been  on  both  calls 
for  about  a  minute  of  overlap.  At  approximately  9:32  p.m.,  Cohen  texted  Pecker,  “The  boss  just 
tried  r.a1Hng  you.  Are  you  free?”  A  minute  later,  Cohen  texted  Howard,  “Is  there  a  way  to  find 
David  quickly?” 

e.  At  approxhnately  9:50  p.m.,  the  Wall  Street  Journal  article  was  published  online. 
Howai-d  and  Hicks  both  sent  web  links  for  the  article  to  Cohen.  Over  the  next  half  hour,  Cohen 
and  Howard  exchanged  several  text  messages  commenting  on  how  the  stoi7  came  across.  The  next 
morning  onNovember  5, 2016,  at  approximately  7:35  a.m.,  Cohen  texted  Hicks,  So  far  I  see  only 
6  stories.  Getting  little  to  no  haction.”  Hicks  responded,  “Same.  Keep  praying!!  It’s  working!” 
Cohen  vwote  bade,  “Even  CNN  not  talking  about  it.  No  one  believes  it  and  if  necessary,  I  have  a 

54 

2017.08.02 


Case  l:18-cr-00602-WHP  Document  48-2  Filed  07/18/19  Page  156  of  201 


s.a,emea.byS.o™deaying.ve.yfl»ga.dco„..dic.i„gtheofte.^ 

use  1.  now  or  even  discuss  with  him  as  no  one  is  talking  about  this  or  oatesl”  Based  on  my 
involvement  in  this  inveshgation.  I  believe  Cohen  was  referring  to  dte  above-referenced  r^rded 

audio  statementbyCliflorddratheobtainedfromDavidson, and  was  statingdtatsu* 

c„uldbeusedtoMue„cepo,cntialnegativemediarelati„gtoTr™p.butwas  unnecessary  at« 


time.  Based  on  a  text  message  from  Hicks  to 
spoke  to  Trump. 


Cohen,  I  believe  that  later  that  morning,  Pecker 


41.  On  or  ahoutKovemberS,  2G16,Tramp  won 


the^election  for  President  of  the  United_ 


42.  On  or  about  January  12,  2018.  the  Wall  Straet  Jowml  fnst  reported  that  Cohen 
arranged  a  paynten,  to  Clifford.  On  or  about  January  22,  2018.  Common  Cause,  a  govemient 

wa«hdoggrnup,f.ledacomplaintwithdrePederalEleetlon  Commission,  allegi^ 

violamd  cmnpaign  fmance  laws  by  making  the  payment  to  Clifford.  Based  on  my  review  publrc 
sources  Mowing  fta,  report,  as  well  as  emails  obmined  pursuant  m  the  Cohen  Email  Warrants.  I 

have  learned  the  following; 

a.  On  or  about  January  23,  2018.  the  day  after  Common  Cause  fried  its  complaint, 
Cohen  began  emailing  himself  drafts  of  statements  describhrg  his  payment  to  Clifford. 
Additionally,  on  January  23.  2018.  Cohen  emailed  the  followhrg  draft  of  drat  smmment  to  an 
individual  who  appears  to  be  writing  a  book  on  Cohen’s  behalf: 
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occur  I  negotiated  a  non-disclosure  agreement  with  Ms.  Clifford  s 
counsel  and  tendered  the  funds.  I  did  this  thmugh  my  Delawai-e  LLC  and 
transferred  personal  funds  to  cover  the  agreement.  I  was  reimbuised 
any  monies  from  Mr,  Trump,  the  Trump  Organization,  my  thnd  party  oi 

the  Presidential  campaign.  At  no  point  did  I  ever  advise  Mi.  ^ 

communications  or  actions  regaining  this  agreemerit 

unusual  as  this  may  appeal',  the  Trumps  have  been  like  family  to  m  f 

over  a  decade.  It’s  what  you  do  for  family. 


(Emphasis  added.)  Based  on  my  involvement  in  this  investigation,  I  believe  that  the  above  email 
■  is  an  aeknowledgement  that  the  allegation  of  the  affair  had  existed  tor  some  time  (“...fc  20JI 
story. . .”),  but  that  Cohen  was  motivated  to  “keep  the  stoiy  fl'om  breakmg"  again  m  Ootobei2016. 

b.  On  or  about  February  13, 2018,  Cohen  said  in  a  statement  to  ne  New  York  Times 


that  “Neither  the  Trump  Organization  not  the  Trump  eampaign  was  a  party  to  the  transaction  with 
Ms.  Cliffold.  The  payment  to  Ms.  Clifford  was  lawful,  and  was  not  a  campaign  contribution  or  a 
campaign  expenditure  by  anyone.”  Cohen  declined  to  answer  follow-up  questions  including 
.  whetha-  Trump  had  been  awai-e  of  the  payment,  why  Cohen  made  the  payment,  or  whelhel  similal 

payments  had  been  made  to  other  people. 

c.  On  or  about  February  14, 2018,  Cohen  was  aslted  by  ZlieiVcw  Tort  fVmes  whether 

Trump  had  reimbmsed  him,  whether  he  and  Tmmp  had  made  any  arrangement  at  the  time  of  the 
payment,  or  whether  he  had  made  payments  to  other  women.  Cohen  stated  in  response,  “I  catft 
get  into  any  of  that.”  On  or  about  Febluary  14,  2018,  Cohen  also  stated  to  The  Washington  Post 
that:  ‘Tn  a  private  transaction  in  2016, 1  used  my  own  personal  funds  to  facilitate  a  payment  of 
$130,000  to  Ms.  Stephanie  Clifford.  Neither  the  Tmmp  Organization  nor  the  Trump  campaign 
was  a  parly  to  the  transaction  with  Ms.  Clifford,  and  neither  raimbmsed  me  tor  the  payment,  either 


directly  or  mdii'ectly.” 

43.  On  or  about  March  9,  2018,  Cohen  stated  to  ABC  News  that  “the  funds  were  taken 
fan  my  home  equity  line  and  tr  ansferred  internally  to  my  LLC  account  in  the  same  bank.” 
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44.  Accordingly,  for  the  foregoing  reasons,  there  is  probable  cause  to  believe  that 
Cohen  committed  violations  of  the  Campaign  Finance  Offenses  by  malcing  an  in-kind  contribution 
to  Trump  or  the  Tmmp  campaign  in  the  form  of  a  $130,000  payment  to  Clifford  on  the  eve  of  the 
election.  Indeed,  while  he  denies  having  given  an  unlawful  contiibution,  in  his  own  statements 
Cohen  has  admitted  that  he  paid  $  130,000  of  his  “personal  funds”  to  Clifford  and  that  the  payment 
occuiTed  less  than  two  weeks  before  the  election,  as  Trump  was  facing  negative  media  allegations 
about  his  behavior  toward  women,  even  though  allegations  of  an  affair  between  Trump  and 

Clifford  ejdsted  since  2014. --In-addition,  theconmiunicatiojLiScord^selfpithu^ema^^ 

that  Cohen  communicated  with  members  of  the  Trump  campaign  about  his  negotiation  with 
Clifford’s  attorney  and  the  need  to  preclude  Clifford  from  making  a  statement  that  would  have 
reflected  negatively  on  the  candidate  in  advance  of  the  forthcoming  election. 

C.  Probable  Cause  Justifying  Search  of  the  Subject  Premises  and  Subject  Devices 

45 .  Based  on  the  foregoing,  my  review  of  records  produced  pursuant  to  subpoenas  and 
the  Cohen  Email  Warrants,  and  the  iCloud  Warrant,  and  my  training  and  experience,  there  rs 
probable  cause  to  believe  that  the  Subject  Premises  and  Subject  Devices  have  been  used  rn 
ftirtherance  of  the  Subject  Offenses  and  are  likely  to  contain  instrumentalities,  evidence,  and  fruits 
of  the  Subject  Offenses,  Specifically,  there  is  probable  cause  to  believe  that  Cohen  permanently 
resides  at  Subject  Premises-1  and,  at  least  in  part,  works  at  both  Subject  Premises-1  and  Subject 
Premises-2,  and  that  those  locations  contain  evidence  relating  to  the  Sterling  taxi  medallion 
transaction,  Cohen’s  assets,  Cohen’s  consulting  work  for  Essential  Consultants  EEC,  and  his 
payment  to  Clifford.  Additionally,  there  is  probable  cause  to  believe  that  Subject  Prermses-3 
contains  evidence  of  Cohen’s  assets  and  his  payment  to  Clifford.  Finally,  there  is  probable  cause 
to  believe  that  Subject  Premises-4,  in  which  Cohen  is  temporarily  residing,  contains  electi'omc 
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devices,  includmg  Subject  Device-1  and  Subject  Dcvice-2.  which,  in  Uu-n,  eoutein  evidence  of  the 
Subject  Offenses,  such  as  evidence  relating  to  the  Sterling  taxi  medallion  transaction,  Cohen’s 
assets,  Cohen’s  consulting  work  for  Essential  Consultants  EEC.  and  his  payment  to  Clifford. 

46.  Flrst,thereisprobableeausetobelievethatCohenlivesandoperateshisbusinesses, 

at  least  in  part,  at  Subject  Premises-l.  Speeiflcally,  from  my  review  of  property  records,  1  know 
that  Michael  Cohen  and  Laura  Cohen  own  (in  trust)  Subject  Premises-l.  From  my  review  of 
Cohen’s  tax  returns.  I  know  he  lists  his  primary  residence  as  Subject  Piemises-1.  AdditionaUy. 

from  my  revie^feiimils  pfoduced-pursuant-to-the-Gohen-Email-Wairants,J-kaow  that  Cob 

routinely  refers  to  Subject  Premises- 1  as  his  home.  For  example,  on  or  about  September  28, 2017 
and  October  6,  2017,  Cohen  emailed  individuals  that  his  home  address  is  the  address  fo,  Subject 
Premises-l.  I  also  know  from  my  review  of  emails  that  Cohen  receives  package  delivery 
notiflcatrons  that  list  Cohen’s  address  as  the  address  for  Subject  Premiscs-1.  Cohen  has  also 
provided  the  address  of  Subject  Premises-l  as  the  address  for  Essential  Consultants  and  Michael 
D.  Cohen  &  Associates,  PC.  For  example,  the  certificates  of  incorporation  and  account  opening 
documents  at  First  Republic  for  both  entities  list  their  addresses  as  the  address  for  Subject 
Pl-emises-1.  See  suirmffl  18(b),  18(d).  The  consulting  agreement  between  Essential  Consultants 
and  AT&T  also  indicated  the  address  for  Essential  Consultants  is  the  address  for  Subject  Premises- 

1.  See  supra 

47.  There  is  also  probable  cause  to  believe  that  Subject  Premlses-1  is  IMtely  to  contain 
instrumentalities,  evidence,  and  fiuits  of  dre  Subject  Offenses.  Speeiflcally,  from  my  review  of 
emails  produeed  pursuant  to  subpoena  and  Are  Cohen  Email  Warrante  and  iCloud  War  mnE  as  well 

as  my  training  and  experience,  I  know  the  followmg: 
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a.  According  to  records  maintained  by  Sterling,  the  address  for  all  of  Cohen  s  taxi 
medallion  LLCs  is  the  address  for  Subject  Premises-1.  See  supra  |  16(c).  Additionally,  the 
medallion  loan  documents  indicate  that  any  mailings  related  to  the  loans  should  be  sent  to  Subject 
Premises-1.  See  id.  Based  on  my  training  and  experience,  as  well  as  my  review  of  public  sources, 
I  know  that  individuals  keep  records  of  properties  and  assets  in  which  they  have  ownership 
interests.  Accordingly,  I  submit  that  Subject  Premises-1  likely  contains  evidence  of  Cohen’s 
ownership  of  the  taxi  medallion  LLCs,  the  revenue  that  those  medallions  generate,  and  the 
transaction  with  Sterling  in  201 4  to  re-fmance  the  medallion  loans  that  were  then  with  Capital  One 


Banlc, 


b.  From  my  review  of  records  maintained  by  Sterling,  I  also  know  that  Steiling 


addressed  documents  relating  to  th<l 


transaction  and  Cohen’s  attempts  to  modify  the 


terms  of  the  medallion  loans  to  Subject  Premises-1.  For  instance.  Sterling  addr-essed  the 
transaction  term  sheet,  see  supra  ^  16(1),  and  its  demand  letter  and  notice  of  default,  see  supra  f 
16(q),  to  Subject  Premises-1.  Accordingly,  Subject  Premises-1  likely  contains  evidence 


transaction  and  Cohen’s  negotiations  with  Sterling.  Some  of  those 


ere  concealed  from 


concerning  the 


records — -such  as  records  relating  to  a  payment  from  Cohen  to 


Sterling  and  cannot  be  obtained  via  subpoena  to  Sterling.  Additionally,  even  where  documents 
were  sent  to  Cohen  by  Sterling  (and  therefore  are  available  from  Sterling  via  subpoena),  the  fact 


that  they  may  be  found  in  Subject  Premises-1  will  be  relevant  to  Cohen’s  possession  or  Imowledge 
of  the  docxraients. 

c.  From  my  review  of  records  maintained  by  Fust  Republic,  I  know  that  Cohen 
provided  the  address  for  Subject  Premises-1  as  the  mailing  addresses  for  the  Essential  Consultants 
Account  and  MDC&A  Account.  See  supra  1 8(b),  18(e).  Accordingly,  it  is  lilcely  that  Subject 
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P«-l  contains  recotds  tnlating  to  the  Essential  Consultants  Account  and  MDCStA  Account, 
includtag.  among  othcfthings.  account  opentag  docmnents,  baric  statensents.  documents  provided 

as  part  oftheknow-your-customer  process,  any  notes  made  by  Cohen  when  he  was  op  n  g 

accounts,  wire  transfer  records,  and  canceled  checlcs.  Even  where  ttrese  records  can  be  obtained 
from  Plrst  Republic,  the  fact  that  drey  may  be  found  in  Subject  Premises-1  will  be  relevant  to. 
among  other  things,  Cohen’s  ownership  of  the  accounts,  or  his  knowledge  of  transactions  or  the 

existence  of  funds  in  accounts. 

- -dr^mmywewofrecordsmaintainedbyxapi^^^^^ 

Stanley,  City  National  Baric,  Signature  Baric,  and  Bethpage  Qedit  Union,  i  know  that  Cohen 
provided  the  address  for  Subject  Premises-1  as  rie  mailhg  for  his  accounts  at  each  of  dtese 
financlri  institutions.  Accordingly,  it  is  likely  that  Subject  Premises-1  contains  records  relating  to 
these  accounts,  including,  among  other  things,  baric  statements  that  list  account  balances.  The 
existence  of  these  records  in  Subject  Premises-1  will  be  relevant  to,  among  other  things,  Cohen’s 
ownership  of  the  accounts  and  his  knowledge  of  the  balances  in  these  accounts. 

e.  Additionally,  Cohen  may  have  records  of  other  bank  accounts  or  assets  that  were 

not  disclosed  to  Sterling  and  ate  not  presently  Icnown  by  law  enforcement.  For  example,  as 
described  above.  Cohen  has  received  interest  mcome  since  2015  that  he  has  not  disclosed  to 
Sterling  or  paid  taxes  on.  Also,  on  Cohen's  August  2014  Financial  Statement,  see  supra  1 16(e). 
he  disclosed  $10,000,000  in  “investments  in  overseas  entities.  ’  The  value  of  these  mves 
was  omitted  from  subsequent  financial  statements.  However,  for  the  reasons  outlined  above,  there 
is  probable  cause  to  believe  that  Cohen  omitted  the  value  of  those  Investments  from  his  2017 

Lt"ncr: 
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f,„a„oial  statements  in  otdet  to  nndetstate  his  assets.  As  Subject  Ptemises-1  is  Cohen’s  primary 

residence  andheusesSubjectPremlsesri  as  the  maillngaddressforbanlctecotds, there  is 

cause  to  believe  tlrat  account  statements  tor  unlcnown  bmtk  accounts  or  assets  concealed  teom 

Sterling  are  lilcely  to  be  found  in  Subject  Premises- 1 . 

f.  Based  on  my  review  of  records  maintained  by  AmT  and  pmduced  pursuant  to  the 

CohenEmailWatrants.Ilmovvth.tthe  address  CohenprovidedtoAmTtorBssentialConsul^^ 

is  the  addtess  for  Subject  Premises- 1.  See  ^upra  1  19(c).  Therefore,  there  is  probable  cause  to 
believe  that  SubJicrPreimselEl-Trill  contain  evidenee-conoetnmg-^^  pf  Essetitra2_ 

consultants  or  money  that  Cohen  received,  through  Essential  Consultants,  fiom  AT^T. 
Additionally,  because  Cohen  used  the  address  tor  Subject  Premlses-l  tor  at  least  one  consultmg 
arrangement  involvmg  Essential  Consultants,  tee  is  probable  cat.e  to  believe  te  Subject 
pmmises-l  may  contain  mcords  ot  other  consulting  arrangements  that  Cohen,  through  Essmttlal 

Consultants,  has  with  other  individuals  or  entities. 

g.  Bas«l  on  my  review  of  records  maintained  by  OetzePs  accounting  Ann.  and  emails 

produced  pursuant  to  the  Cohen  Email  Watrants.  1  have  learned,  that  GetzePs  accounting  firm  sent 

documents  to  Subject  Ptemises-1  and  used  the  address  for  Subject  Premlses-l  as  the  address  Usted 

on  Cohen’s  personal  and  corporate  tax  reterns.  Sac  supra  1  16(n).  For  instance,  on  or  about 

October  6.  2017,  an  employee  at  Oetzel’s  accountmg  firm  emaded  Cohen  that  she  h 

Cohen’s  septembel-  2017  Financial  Statement  by  FedEx  to  Cohen’s  attention.  Accordingly. 

Cohen’s  tax  records  are  likely  to  be  found  in  Subject  Premlses-l. 

h.  Basedonmyreviewotbanltrecordsandpublicly-availabledocu.nents,Ilmowthat 

Cohen  used  $130,000  from  a  home  equity  line  of  credit  on  Subject  Premises-1  to  pay  Clifford.  1 

also  imowthatondie  settlement  andnondisclosuiea^eementbetween-PeggyPeterson”^ 
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LLC,”  the  address  for  Essential  Consultants  is  Subject  Premises-1.  Accordingly,  Subject 
Premises-1  is  lilcely  to  contain  evidence  of  tlie  Campaign  Finance  Offenses,  includmg  settlement 
and  nondisclosm-e  agreements,  payment  records,  written  and  email  correspondence,  and  records 

pertaining  to  the  home  equity  line  of  credit. 

i.  Based  on  my  review  of  emails  produced  pursuant  to  the  Cohen  Email  Wauants  and 

iCloud  Wan-ant,  I  know  that  Cohen  used  at  least  one  Apple  iPhone,  an  Apple  iPad  Mim,  and  a 
MacBook  Pro  to  access  his  iCloud  account.  Based  on  my  review  of  location  records  provided  by 

w^pple  pursuant-to-the-iCloud--WarranVFlmowjthat_ei_ectro^^^  devices  linlced  to  C^’s  iCloud 

account  were  used  at  Subject  Premises-1  to,  among  other  things,  place  telephone  calls  and  backup 
files  to  Cohen’s  iCloud  account.  Accordingly,  there  is  probable  cause  to  believe  that  Subject 
Premises-1  contains  electronic  devices,  including  certain  Apple  products,  that  for  reasons 

discussed  below  are  lilcely  to  contain  evidence  of  the  Subject  Offenses. 

j.  Based  on  my  review  of  emails  produced  pursuant  to  the  Cohen  Email  Waivants,  I 

understand  that  Subject  Premises-1  recently  sustained  water  damage  to  certain  paits  of  the 
premises,  and  that  Cohen  has  engaged  contractors  to  perform  certain  remediation  work  on  the 
premises.  In  addition,  as  set  forth  above,  I  believe  that  Cohen  and  his  family  are  temporaiily 
residing  at  Subject  Premises-4  in  the  Loew’s  Regency  Hotel,  which  is  approximately. two  blocks 
fi-om  Subject  Premises-1.  However,  based  on  my  review  of  a  work  order  sent  to  Cohen’s  email 
by  a  contactor,  I  understand  that  the  first  phase  ofthe  work  order  calledforthe  conhuctorto  ‘Tack 
&  Remove  all  items  &  furnishings  in  Living  Room,  Kitchen,  Sons  Room  &  Dining  Room  and 
store  them  off-site.  In  addition,  based  on  my  review  of  drawings  sent  to  Cohen  by  the  contractor, 
it  appeai-s  that  die  work  is  primailly  being  done  in  these  rooms.  Thus,  I  believe  tliat  the 
consti-uction-to  the  extent  it  is  still  ongoing  -  would  not  necessarily  have  caused  Cohen  to  move 
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all  documents  or  evidence  responsive  to  the  warrant  out  of  Subject  Premises-1,  because  it  does  not 
appeal-  that  work  is  being  done  to  the  portion  of  Subject  Premises-1,  such  as  a  home  office  or 
Cohen’s  own  room,  where  such  documents  or  evidence  would  most  likely  be  found. 

48.  Second,  there  is  probable  cause  to  believe  that  Cohen  uses  Subject  Premises-2  as 
office  space,  and  also  that  Subject  Premises-2  contains  certain  electronic  devices.  Specifically, 
from  my  review  of  the  “strategic  alliance  agi-eement”  between  Squire  Patton  Boggs  and  Cohen, 
and  my  review  of  the  press  release  on  Squire  Patton  Boggs’s  website,  I  loiow  that  Cohen  has  an 
effiGe-at-Subject-Premises^.-&e-^^^^^^^^^  Indeed,  I  have  leai-ned  that  purs^t 

Cohen’s  agi-eement  with  the  law  ffim,  he  has  “dedicated  and  segregated  office  space”  m  Squire 
Patton  Boggs’s  offices  on  the  23rd  floor  of  30  Rockefeller  Plaza,  and  that  the  space  is  “physically 
sepai-ate”  from  the  fnm’s  offices  and  has  “locked  doors  and  its  own  locked  file  cabinets.”  See 
supra  If  19(e).  Additionally,  I  Imow  that  under  the  terms  of  the  agreement,  Cohen  agreed  to 
“arrange  for  [his]  own  computer  sei-ver  system  that  is  not  connected  to  [Squire  Patton  Boggs  s] 
computer  network  system.”  I  Icnow  from  my  participation  in  an  intei-view  with  Getzel,  who  met 
Cohen  at  Subject  Premises-2  in  2017,  that  Subject  Premises-2  is  an  office  with  a  door,  it  appears 
to  be  used  only  by  Cohen,  and  it  contains,  among  other  things,  a  computer  and  paper  files. 
According  to  Getzel,  when  Getzel  saw  Cohen  at  Subject  Premises-2,  he  had  two  cellular 
telephones  in  Subject  Premises-2.  I  also  know  from  my  review  of  emails  produced  pursuant  to  the 
Cohen  Email  Warrants  that  Cohen  uses  the  address  for  Subject  Premises-2  m  the,  signature  block 


31  As  noted  below,  based  on  my  training  and  experience,  I  beUeve  that  individuals  who  ^vel  or 
stay  in  hotels  for  short-term  periods  commonly  bring  some  items  with  them,  such  as  poi 
Srtices  or  sensitive  items,  messing  that  Cohen  has  likely  taken  some  ev, to  item 
Subject  Premises-1  to  Subject  Preinises-4.  Nevertheless,  given  the  temporary  natoe  of  Cohen  s 
stay  at  Subject  Premises-4  and  the  scope  of  the  work  being  done  at  Subject  Premises- 1,1  beheve 
it  I  unlikely  that  Cohen  has  taken  all  evidence  that  would  be  subject  to  seizure  out  of  Subject 

Premises-1. 
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on  his  emails.  Based  on  my  review  of  notes  of  a  call  between  Cohen  and  Fkst  Republic  Employee- 
2  (which  notes  were  taken  by  another  Fkst  Republic  employee,  who  was  participating  m  the  call 
and  talcing  notes),  I  know  that,  on  or  about  November  15,  2017,  Cohen  told  First  Republic 
Employee-2  that  he  had  a  new  office  at  30  Rock.  Moreover,  I  Icnow  from  an  article  in  Vanity  Fair 
published  on  or  about  Febmaiy  14, 2018,  that  Cohen  was  interviewed  by  the  magazine  in  Subject 
Premises-2  in  or  about  Februaiy  2018. 

49.  There  is  also  probable  cause  to  believe  that  Subject  Premises-2  is  lUcely  to  contam 
imUTHn8nalMeSreviJence,-and  Mte^^  SpeciflcalllJi;om  my  revi^  of_ 

emails  produced  pursuant  to  subpoena  and  the  Cohen  Email  Warrants  and  iCloud  Warrant,  as  well 

as  my  training  and  experience,  I  Icnow  the  following: 

a.  According  to  records  maintained  by  Sterling,  when  Cohen  was  emailing  with 
Sterling  Employee-3  in  201 8  about  a  modification  to  his  existing,  loan  from  Sterling,  Cohen  listed 
his  addi-ess  in  his  email  as  tire  address  for  Subject  Premises-2.  See  supra  If  16(t),  16(u). 
Accordingly,  Subject  Premises-2  lilcely  contains  evidence  concerning  Cohen’s  loan  modification 

negotiations  with  Sterling. 

b.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  WaiTants,  I 
Icnow  that  the  addi-ess  Cohen  provided  to  M  and  BTA  for  Essential  Consultants  is  the  address 
for  Subject  Premises-2.  supra  ^  19(a),  19(b).  Tfrerefore,  there  is  probable  cause  to  believe 
that  Subject  Premises-2  will  contain  evidence  concerning  the  operation  of  Essential  Consultants 
or  money  that  Cohen  received,  thinugh  Essential  Consultants,  from  ICAI  and  BTA,  among  other 
entities  with  which  Cohen  had  a  consulting  aiTangement.  Additionally,  based  on  my  review  of 
emails  sent  in  201 8  that  were  obtained  pursuant  to  the  Cohen  Email  Warrants,  I  know  that  Cohen 
continues  to  enter  into  consulting  aiTangements  thinugh  Essential  Consultants,  and  agreements 
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..elating  to  those  attengements  indicate  that  Essential  Consultants  is  located  at  Subject  Ptemises- 
2.  Additionally,  because  Cohen  used  the  address  for  Subject  Piemlses-2  for  multiple  consulting 
armngements  invot*ing  Essential  Consultants,  there  is  probable  cause  to  believe  that  Subject 
Premises-2  may  contain  records  of  other  unltno™  consulting  aiTangements  that  Cohen  has  with 

other  individuals  or  entities, 

c.  Basedonmyreviewofrecordsm.mtainedbyGetzePsaccountlngfi,m,ande, nails 

produced  pur^ant  to  the  Cohen  EmaU  Warrants,  as  well  as  nay  participation  in  an  intcview  wifl. 

GefeeUmwiamaWGeeefwsited-Subjecl-Preniises-^^^^^^ 

See  supra  1 20(a).  At  that  meeting,  Getel  discussed  with  Cohen  whether  Cohen  should  disclose 
Essential  Consultants  on  his  personal  financial  statement  to  banks.  According,  there  is  probable 
cause  to  believe  that  Subject  Premiscs-2  will  contain  evidence  relating  to  Cohen's  taxes,  or  notes 
of  his  eonvemation  with  Getzel.  Moreover,  the  fact  that  Cohen  used  Subject  Premises-2  for  a 

meetmgreganlinghispe..sonalfmanclalmatteieprovidesprobablecausetobelievethatd«^^^ 

and  informaaon  regarding  his  finances  will  be  found  in  Subject  Ptemises-2. 

d.  Based  on  my  participation  in  an  inteiview  with  Getzel,  I  loiow  that  Cohenmaintams 

a  computer  in  Subject  Premises.2.  From  my  review  of  IP  data  produced  pumuant  to  a  subpoena 
and  pen  register  to  Google,  it  appears  that  Cohen  is  logging  into  his  Gmail  account  from  Subject 
Ptemlses-2.  Accordingly,  there  is  probable  cause  to  believe  that  Subject  Premisea-2  contains 
electronic  devices,  that  for  reasons  discussed  below  are  likely  to  contain  evidence  of  the  Subject 

Offenses. 

e.  Based  upon  my  training  and  experience,  I  have  learned  that  individuals  who 
maintain  businesses  typically  keep  records  relating  to  the  business-^uch  as  contracts  with  clients 
and  records  of  payments-nt  the  business'  identified  location.  I  am  not  aware  of  any  addresses 
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associated  wift  Esseadal  Co»tltan«  other  than  Subiect  Premises-1  and  Subject  Premises-2. 
Accordingly,  there  is  probable  cause  to  believe  that  Subject  Prentises-l  and  Subject  Premises-2 
will  contain  business  Kcoids  for  Essential  Consultants. 

50.  Third.thereisprobablecausetobelievethatSubjectPremises-3islikel,tocontain 

insnumentallties,  evidence,  and  ftalts  of  the  Subject  Offenses.  In  parttculart 

a.  As  noted  above.  Cohen  has  two  bank  accounts  atTD  Bank.  In  or  aboutNovember 

2017.asCohen«asreceivingsubsmntialincomeftomconsul.ingwork-whichhediduotdMose 

-tVStSi^^peded-*^^^^ 

light  of  the  aforementioned  evidence  that  Cohen  conceals  assets,  including  assets  atTD  Bank, 
foere  is  pmbable  cause  to  believe  that  Subject  Premises-3  contains  financial  assets,  objects  of  value 
and/or  documents  relating  to  such  assets  or  objecfo  of  value  that  Cohen  likely  ^d  not  disclose  to 
Sterling.  Indeed,  based  on  my  training  and  experience.  I  am  awme  that  people  often  conceal 

valuableifomsinsafetydepositboxes.  Accordingly, foerelsprobablecauseto believed 

Premises-3  will  contain  evidence  of  the  Bank  Fraud  Offenses. 

h.  in  addition,  based  on  my  review  of  records  poduced  by  TD  Bank,  I  know  that 
Cohen  has  accessed  the  vault  in  which  Subject  Premises-3  is  stored  on  two  occasions.  The  first 
suchoccasionwas  onNovember  10, 2017.  Cohen  signed  into  foe  vault  at  approximately  5t35  and 
out  of  vault  at  appmximately  5:39  on  that  date.-  Based  on  my  review  of  toll  records.  I  know  that. 
Cohen’s  first  call  after  he  signed  out  of  the  safety  deposit  box-  approximately  45  minutes  later- 
wastoKelthDavidson.  Specifically,  at  6:25  p.m.  Cohen  called  Davidson  andthey  spokefor  less 
foan  a  minute;  three  minutes  later.  Davidson  caUed  Cohen  bade  and  they  spoke  for  approximately 
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22  minutes.  The  seeond  ^ch  occasion  was  on  Febtuaty  2. 2018,  which  is  dming  dte  time  period 
nmnemus  media  reporis  about  Cohen’s  payment  to  Clifford  were  being  published,  and  is  one  day 
after  it  appears  that  Cohen’s  family  moved  into  Subject  Premises-4.  as  set  forth  above.  The  tlmmg 

„fCohe„’stwovisi.stothevault-oneshorUybetoreacalltoKeithDavidson.nddteod.eramund 

the  time  ttat  Cohen  came  under  media  scrudny  in  connection  wid.  the  payment  m  Davidson’s 

cUent-givesriseto  probable  cause  to  behevethat  subject  Prentises-awm  contain  evidenceofthe 

Campaign  Finance  Offenses,  such  as  documents  relevant  to  the  Cohen  s  dealmg 

Davidson  and  the  pd^fto  Cliffordrincluding-documents-oirevldencufha^  did  not  want 

to  leave  in  his  apartment  where  construction  workers  would  be  present.” 

51.  Based  onmy  review  of  emails  obtained  pursuant  to  the  CohenEmail  Warrants  tmd 

cell  phone  location  mtom.ation.Ibelteve  tot  Cohen  is  temporarily  residing  in  subject  Pre^^^^^ 

4.  .ee  fl  8(d).  There  is  also  probable  cause  to  believe  that  Subject  Prem.es4  contams 

instmnentaUties  and  evidence  of  the  Subject  Offenses,  including,  the  foUowingt 

a.  As  described  above.  It  appears  tot  Cohen  moved  to  Subject  Premises^  on  or  about 

February  1,  2018.  at  which  time  numerous  media  reports  about  Cohen’s  involvement  in  to 
payment  to  Clifford  wem  being  published.  See  11  3(d).  Durmg  this  time  same  period. 

Cohenwas to, uentlycorrespondhrgwldrtomedia and senthimself  and otorssmternents  about 

his  hrvolvement  in  the  payment  to  Clifford.  See  sup,™  11 42(a>(e).  Thus,  there  is  probable  cause 
drat  Cohen  took  at  least  some  do—  and  evidence  relathrg  to  to  Clifford  payment  wito  hrm 
m  subject  Premises-4.  in  order  to  referenee  and  consult  them  in  connection  with  these  shrtements. 


approximately  five  tohes  by  ten  totos.  j 


33  As  noted  above,  Subject  Premises-3  is  approxima  e  ^  ^ ,  Jg.  however,  a  small  number 

portable  stomge  device,  would  fit  in  Subject  Premises-3, 
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b.  AS  described  above,  at  the  time  Cohen  moved  to  Subject  Ptemises-4,  he  was  also 

m.hemidsto,ongomgnegotia.ionswithSteriingtega..dmgtherefmanc^ 

Fotexample.o„Janumy  30,2018, CohenhadalengdtyphonecallwidtSteriingEmployee-aabout 

his  finances  and  the  proposed  reshuetnring.  and  on  February  1.  2018.  Cohen  sent  a.  email  to 
Sterling  En.ployee-3  claiming  that  he  did  not  have  more  than  $1 .25  million  in  cash.  See  sufra 

16(u).-lh..s,therelsprobablecausefl>atCohentookatleas.somedoenments.ndevldencerelatmg 

to  his  ongoingnegotiafions  with  Sterling  withhim  to  SubiectPremises-4, in  order  to  refmence  and 

consult  them  in  cotmectioFwiffi'tlre^negotmtiom 

c.  As  described  above.  Cohen  used  at  least  one  Apple  iPhone,  an  Apple  iPad  Mim, 
and  a  MacBook  Pro  te  access  his  iCloud  account,  and  tee  electronic  devices  linked  to  Cohen’s 
iCloud  account  were  used  a.  Subject  Premises-1  -  Cohens’  permanent  residence  -  to.  place 

telepbonecallsa„dbackupfilestoCohen’siCloudaccount.Sacsnprnfl47(i).Ald.oughCohen’s 

stay  at  Subject  Premises4  is  temporary,  based  on  my  training  and  experience  I  know  that 
individuals  who  travel  or  stay  in  hotels  for  short-term  periods  commonly  bring  portable  electronic 
devices  with  them,  such  as  cellular  phones,  tablets,  or  laptops.  Accordingly,  there  is  probable 
cause  to  believe  that  Subject  Premises-4,  where  Cohen  cmrently  appems  to  be  residing,  contains 
electeonic  devices,  including  Subject  Device-l,  Subject  Device-2,  and/or  certain  Apple  products. 
4at  for  the  reasons  riiscussed  herein  are  Idtely  to  contain  evidence  of  the  Subject  Offenses. 

d.  Monxrver.  as  set  forth  above,  based  on  cellphone  location  information  1  know  that 
subject  Deviee-1  and  Subject  Device-2  wore  m  tee  vicinity  of  Subject  Premises-4  as  r^ently  as 
this  morning  (April  8.  2018).  As  set  forth  above,  there  is  probable  cause  to  beUeve  teat  Cohen 
used  tee  subject  Devices  in  furtherance  of  tee  Subject  Offenses,  mcluding  to  communicate  with 
Sterling  employees  regarding  the  mettellion  transaction,  with  First  Republic  employees  regarding 
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the  Essential  Consultants  Aecount,  with  his  accountant  regai-ding  his  finances,  and  with 
individuals,  such  as  Davidson,  Howard  and  Pecker,  involved  in  the  $130,000  paymentto  Clifford. 

52.  Although  Cohen  appears  to  be  residmg  cuitently  in  Subject  Premises-4,  it  is 
unlaiown  whether  Cohen  will  be  physically  present  within  Subject  Premises-4  at  the  moment  the 
warrantsoughtherein  are  executed.  If  Cohen  is  within  Subject  Premises-4  atthatmoment.  Subject 
Device-1  and  Subject  Device-2  -  his  cellphones  -  will  likely  also  be  within  Subject  Premises-4. 

If  Cohen  is  not  within  Subject  Premises-4  at  that  moment,  the  devices  will  likely  be  on  his  person, 

wherever  he  isdoeatedyCwhichj-based  on  locatiomdata  fonSubjecLDevice- 1  and  Subjegyjevice-g_ 

as  i-ecently  as  today,  is  likely  to  be  in  the  Southern  District  of  New  York).  As  such,  lliis  warrant 
seelcs  sepai-ate  authority  to  seize  Subject  Device- 1  and  Subject  Device-2,  in  the  event  that  diose 
devices  ai-enot  located  within  Subject  Premises-4  (or  another  Subject  Premises)  atllie  moment  the 

warrants  sought  herein  are  executed. 

D.  Probable  Cause  Justifying  Search  of  ESI 

53.  Based  on  the  foregoing,  there  is  probable  cause  to  believe  that  Subject  Premises-1, 

Subject  Premises-2  and  Subject  Premises-4  contain  electronic  devices  that  are  likely  to  contam 
evidence,  finiits,  and  instiumentalities  of  the  Subject  Offenses  (and,  as  set  forth  above,  that  Subject 
Device- 1  and  Subject  Device-2  ai-e  themselves  electronic  devices  that  are  lilcely  to  contain 
evidence  of  the  Subject  Offenses).  Specifically,  based  on  my  review  of  information  produced 
pui-suant  to  the  Cohen  Email  Wairants,  the  iCloud  Wairant,  and  subpoenas,  as  well  as  pen  register 
data,  I  submit  that  there  is  probable  cause  that  Subject  Premises-1  contains  an  Apple  iPad  Mini,  a 
MacBook  Pro,  and  has,  at  various  times,  contained  Apple  cellphones;  similarly,  there  is  piobable 
cause  that  Subject  Premises-2  contains  a  computer  and  has,  at  various  times,  contained  Apple 
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cellphones.  These  devices  are  likely  to  include  evidence,  Suits,  and  instrumentalities  of  the 

Subject  Offenses  for  the  following  reasons: 

a.  As  described  throughout  this  affidavit,  Cohen  used  email  to  send  and  receive 

communications  related  to  the  Subject  Offenses.  In  particular,  Cohen  used  emaU  to  send  and 

receive  conununieatio„swltoStorling,FirstRepublic.Oetzel,  the  entitles  to  trttichta 

consulting  services,  Davidson,  and  Howard,  among  others.  While  some  of  dtese  emails  have 
already  been  obtained  via  subpoenas  and  search  warrants,  I  know  fiom  my  ti  aming  and  exp 

-tharlndlvMtmltrcan-and-do-^^^^^^^^  “  °- 

those  emaas  on  their  hard  drives.  I  also  know  that  individuals  often  have  multiple  emaU  accounts, 
some  of  which  may  not  be  known  to  law  enforcement,  and  as  a  result  electronic  devices  can  be  a 
imlque  repository  of  all  emails  relevant  to  certain  Subject  Offenses.  Indeed,  from  my  involvement 
in  this  investigation.  I  know  that  Cohen  had  an  email  account  with  the  Dump  Organixatlon,  but 
the  DSAO  and  FBI  have  not  been  able  to  obtain  the  contents  of  that  account  to  date.  Thus,  emails 
relevant  to  the  Subject  Offenses  are  lilcely  stored  on  electronic  devices  in  Subject  Premises-1. 

Subject  Premises-2  and/or  Subject  Premises-4. 

b.  Additionally,  SubjectPremises-l,  Subject  Premise-2  and  Subject  Premises-4  likely 

comain  elechonic  copies  of  documents  relevant  to  the  Subj  ect  Offenses.  Indeed,  I  know  from  my 

training  and  experience  that  individuals  often  retain  copies  of  important  documents  on  their 
computer  or  other  electronic  devices  capable  of  storing  information,  including  cellphones  (such 
as  toe  Subject  Devices)  and  tablets.  Here,  there  are  a  number  of  documents  that  Orhen  has  likely 
.■etained  that  will  be  relevant  to  the  Subject  Offenses.  For  example,  electronic  devices  may  include 
documentation  of  Cohen's  true  net  worth,  a  listing  of  his  assets,  an  accounting  of  his  available 
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cash,  consulting  agr^ments  with  ftird  parties,  and  docunrentation  of  his  payment  to  Cliflord. 

among  other  evidence  of  the  Subject  Offenses. 

0.  Third,  I  know  fom  my  review  of  emails  obtained  pursuant  to  the  Cohen  Email 

Watvanto  that  Cohen  sent  up  online  banking  with  Firs,  Republic.  Based  on  my  gaining  and 
experience.  I  know  that  individuals  who  set  up  online  banking  oflen  mceive  electronic  notices 
concerning  financial  hansactlons  and,  on  occasion,  save  records  of  dtelr  financial  toansaClor.  to 
tlrelr  devices.  Accordingly,  Acre  is  probable  cause  to  believe  that  Cohen’s  electoonic  devrces 
contain  evidence  6fB5iHnpctmly,1nclndingthe  existence  of  banlcaccountioi  assete  that  Cohen 

did  not  disclose  to  Sterling  or  Melrose. 

d.  Fourth,  from  my  review  of  records  produced  by  Apple,  I  Imow  that  Cob 
communicates  using  text  message  as  well  as  encrypted  communicafions  applicafions.  These 
applications  that  Cohen  has  do«loaded  onto  a  phone  Include,  but  are  not  limited  to,  WhateApp, 
Signal,  and  Oust.  I  know  fiom  my  review  of  toll  records  and  text  messages  that,  in  particular. 
Cohen  communicated  with  Pecker  using  these  encrypted  appUcations.  Accordingly,  fltere  rs 
probable  cause  to  believe  that  Cohen’s  cellphones  -  toe  Subject  Devices  -  will  eonbun  encrypted 
.....ages  that  are  not  otherwise  accessible  relating  to  the  Subject  Offenses. 

■  54,  Based  on  my  teaming  and  experience,  I  Imow  that  individuals  who  engage  in 
financial  crimes  commonly  use  computed  to  communicate  with  co-consphatom,  keep  fhmncial 
ledgers,  and  retain  fraudulent  documents.  As  a  result,  they  often  store  data  on  their  computers 
related  to  their  illegal  activity,  which  can  include  logs  of  online  or  cellphone-based  -chata”  with 
co-conspiratorsi  email  conrespondence;  contact  information  of  co-conspiratota.  including 
telephone  numbers,  email  addresses,  and  Identifiers  for  instant  messaging  and  social  medial 

accounts;  bank  account  numbers;  and/or  records  of  uses  of  funds. 
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55.  Based  on  my  training  and  experience,  I  also  Imow  that,  where  computers  are  used 

in  furtherance  of  criminal  activity,  evidence  of  the  criminal  activity  can  oflen  be  found  months  or 

even  years  after  it  occurred.  This  is  typically  true  because: 

'  .  Elcch-onic  flies  can  he  stored  on  a  hard  drive  for  f 

have  little  incentive  to  delete  data  that  may  be  useful  to  consult 

.  Even  when  a  user  does  choose  to  delete  data,  the  ™  “home 

:teSi“ettm;n“the\:m;L.kimila^ 

teige^yao^intoa^^— 

piges.  Thus,  the  abUity  ^  liter’s 

•  In  the  event  that  a  user  changes  ^ 

a"  rrs "  rChl-Auch  as  drmnb  dflves,  fla. 
memoiy  calds,  CD-ROMs,  or  portable  haid  drives. 

56.  Based  on  the  foregoing.  I  respectfully  submit  there  is  probable  cause  to  believe  that 
Cohen  engaged  in  the  Subject  Offenses,  and  that  evidence  of  this  criminal  activity  is  likely  to  be 
found  in  the  Subject  Pi-emises,  on  computers  and  electronic  media  found  in  the  SubjectPremises, 
and  on  the  Subject  Devices.  In  partieular,  there  is  probable  cause  to  believe  that  the  Subject 
Pmmises  mtd  Subject  Devices  will  contain  evidence,  fluits,  and  insUumentelMes  ofviolattons  of 
are  Subject  Offenses,  as  more  fully  described  in  Section  E  of  Attachments  A,  B.  C,  D,  E  and  F  to 

the  proposed  waiTants,  including  the  following: 

a.  Evidence  necessary  to  establish  tire  occupancy  or  ownership  of  the  Subject 

Pmmises.  including  without  limitation,  utility  and  telephone  bills,  mall  envelopes,  addressed 
correspondence,  bank  statements,  identification  documents,  and  keys. 

b.  Evidence  relating  to  Sterling.  Melrose,  and/or  taxi  medallions. 
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e.  Evidence  ..latog  to  a  plan,  proposal,  or  agreement  tor  Cohen  and/o,  entities 
assoeiated  with  him  to  hmrfe,  any  interest  in  taxi  medallions,  and  any  associated  debte  or 

liabilities,  to  ofters,  including  ““““ 

d.  Evidence  relating  to  a  plan,  proposal,  or  agreement  te  modi^  loans  tat  Cohen  has 

with  Sterling  and/or  Melrose. 

e.  Evidence  relating  to  Essential  Consultants.  LLC.  including  any  documents  tat 
indicate  the  nature  and  purpose  of  payments  made  to  or  horn  Essential  Consultants  or  the  naUrre 

t.  Evidence  otincome  to  Michael  D,  Cohen  &  Associates,  including  any  documents 
tat  indicate  the  namre  and  purpose  of  payments  made  to  or  fi-om  Michael  D.  Cohen  &  Associates, 
or  evidence  otthe  purpose  of  accounts  opened  tathe  name  of  Michael  D.  Cohen  *  Associates. 

g.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalent, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 

entities,  including  tax  tetums,  personal  financial  statements,  and  bank  records. 

h.  Evidence  relating  to  agreements,  lomi^ntar  financial  transactions  between 

Cohen  and^^^^Birtl  any  payments  by^^^  Cohen. 

i.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  MoDougal,  or  their 

agents  or  legal  representefives.  including  any  nondisclosure  agreements  and  related  documents. 

and  any  conununications  related  to  such  agreements. 

j.  Evidence  of  communications  involving  Michael  Cohen.  Donald  Trump  and/or 

agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  ICaren  McDougal.  or 
payments  to  Stephanie  Clifford  or  Kai-en  McDougal. 
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Ic.  Evidence  of  communications 
David  Pecker,  and/or  Dylan  Howard  about 


involving  Michael  Cohen,  American  Media,  Inc., 
Donald  Trump,  the  Trump  Campaign,  Stephanie 


Clifford,  and/or  Karen  McDougal. 

l.  Evidence  relating  to  Cohen's  role  in  the  Trump  Campaign,  and  coordination  or 

consultation  with  the  Trump  Campaign, 

m.  Evidenee  of  communications  with  Donald  Tramp  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  mlyscooi  tape  and  other  potential  sour^  of  negative 

pubUoity  involving  TraSp'ireKtionshlp-inthe-run  upT^^  - 

n.  Evidenee  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 

payment  to  Clifford  or  others  in  connection  with  the  election. 

o.  Evidence  relating  to  Cohen’s  loiowledge  of  the  eampaign  finance  laws,  campaign 

conhibution  reporting  requirements,  and  campaign  contribution  limits. 

p.  Communications  with  others,  including  Jeffrey  Geteel  and/or  other  accountants, 

relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  fmanees; 

q.  Communications,  records,  documents,  and  other  files  reflecting  false 


representations  to  a : 


financial  insatution  related  to  dte  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
fimmcial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  puipos.  or  nature  of  any 
financial  transactions  involving  that  financial  institution; 

r.  Evidene.ofCohen'sinte„tasitrelatestotheSubjectOffemiesunderi.westigation. 


in.  Procedures  for  Searching  ESI 
A.  Execution  of  Warrant  for  ESI 

57.  Federal  Rule  of  Criminal  Procedm'e  41(e)(2)(B)  provides 


for  and  seize  property  “may 


authorize  the  seizure  of  electronic  stoiage 
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copying  of  ole^-onicaUy  s^red  into.ma.ion  .  . .  to.  late,  .eview  "  Cons^ten.  wid.  Rule  41.  dais 
application  m, nests  aufl.oriza.ion  to  seize  any  compute,  devices  and  stotage  media  and  fl-anspori 

d.em.oanapp.op.iatelawenfomementtaciii^to..eview.msisWloallyueoess^ 

of  reasons: 

•  sr=erpr:=-^^ 

.  Second,  because  compute,  date  is  pa.ticula.ly  ^^-^^"atnriM 

— s;.:urrr=:^" 

.  Thud,  them  am  so  many  ^pes  of  compute,  tadwtee 
underlying  computer  data* 

.  FouA,  many  faCcs  can  complicate  "^VrpS*  tcw“ 

device,  including  the  mci  easing  y  co  conceal  data  on  the  computer,  which 

features  or  configurations  designe  o  p  ^  personnel  to  detect  and  resolve, 

often  take  considerable  time  and  resources  foi  forensic  peisonn 

58.  As  discussed  herein.  Squire  Patton  Boggs  is  a  tuuotioning  law  fmu  that  coudncts 

legittatetebusinessumelatedto  Cohen's  commission  of  the  Subject  Offenses.  Subject  ftemises- 
2  is  an  office  located  inside  of  Squire  Pateou  Boggs's  New  York  office.  In  order  te  execute  fl.= 
„t  h.  Are  most  masouable  fashion,  law  enforcement  petsormel  wiQ  ahempt  to  invesflgate  on 

ftesoeneofwha, computers  or  steragemcdla,  if  any.mustbeseizedor  copied.  m.dwha, computers 

or  storage  media  need  no,  be  seized  or  copied.  Law  enforcement  personnel  will  speak  wifl.  Squire 
Pahon  Boggs  personnel  on  fl.e  scene  as  may  be  appropriate  ,o  detemine  which  files  and  elecflonic 
devices  wiflun  Subject  P.emises-2  belong  to  or  were  used  by  Cohen.  While,  based  on  .he 
foregoing,  it  does  no.  appete-  drat  Cohen  shared  eieeteonic  devices  or  a  server  wid.  Squire  Padon 
Boggs,  where  appmpriate.  law  enforcement  personnei  will  copy  data,  radror  than  physically  se.^ 
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computers,  to  reduce  the  extent  of  any  distuption  of  Squire  Patton  Boggs's  operations.  If.  after 
inspeetmg  dte  sei^  off-site.  i,  is  determhted  that  some  or  ali  of  this  equipment  is  no 

longer  necessary  to  retrieve  and  preserve  the  evidence,  the  Oovernment  will  return  it. 

59.  Additionally,  because  Cohen  is  an  attorney,  and  claims  to  serve  as  a  personal 

aftomey  for  Trump,  the  review  of  evidence  selxedfromthe  Subject  Premises  and  Subject  Devices 

will  be  eonductedpursuanttoestablished  screening  procedures  to  ensure  dratthe  law  enforeement 

personnel  involved  in  the  investigation,  including  attorneys  for  the  Government,  collect  evrdence 
-inamannerreasonabTy-dejdgTTedWrotdct^^^ 

appropriate, drepro^ureswill  include  use  ofadesignated'‘fdterteam,''sepm^^^ 

toe  investigative  team,  in  order  to  review  potentially  privileged  communications  and  determine 
which  communications  to  release  to  the  investigation  and  prosecution  team. 

B.  Accessing  ESI  on  the  Subject  Devices 

60.  As  described  above,  the  Subject  Devices  are  both  Apple  brand  devices, 

61.  I  know  from  my  training  and  experience,  as  well  as  ftom  information  found  in  ' 
publicly  available  materials  including  those  published  by  Apple,  that  some  models  of  Apple 
devices  such  as  fPhones  and  iPads  offer  toeir  users  the  ability  to  unlock  toe  device  via  toe  use  of  a 
fingerprint  or  thumbprint  (collectively,  “fingerprint”)  in  lieu  of  a  numerrc  or  alphanumerro 

passeodeorpasswordThisfeatore  is  calledTouchro.Ialsolmowdrattoe  Apple  iPhoneXoff^ 

ite  user-s  toe  ability  to  unlock  the  device  via  the  use  of  facial  recognition  (tough  infrared  and 
visible  li^t  scans)  in  lieu  ofa  numeric  or  alph^umeric  passcode  or  password.  This  feato  is 

called  Face  ID. 

62.  If  a  user  enables  Touch  ID  on  a  given  Apple  device,  he  or  she  can  regrster  up  to  5 
fmgerprints  that  can  be  used  to  unlock  toat  device.  The  user  can  then  use  any  of  toe  registered 
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flagevp,in«tounlock*edevioebyp.essmgth..eleva„.fm8erW 

whioh  is  foaad  in  .hennnnd  button  (often  rfen-ed  to  as  tbe  “home”  button)  found  at  the  bottom 
eenter  of  the  tom  of  ttte  deviee.  If  a  user  enables  Face  ID  on  a  given  Apple  device,  he  or  she  can 
unlock  the  device  by  raising  the  iPhone  to  his  or  her  face,  or  tapping  the  screen.  In  my  tia 

andexperience.usem  of  Apple  devices  thatofferTonchlDorFaee  ID  often  enable  it  because  itis 

considered  to  be  a  more  convenient  way  to  nnloclc  the  device  ttr»  by  entering  a  numeric  or 

alphanumeric  p^scodeorpassword.  as  well  asarnore  secure  waymp.otectthedevice.sc 

- 63.  Insome-^.gc-F5:Toirch-IDwFace-IB-cannort^^^^ 

has  either  security  feature  enabled,  and  a  passcode  or  password  must  be  used  instead.  These 
clroumsmnces  include:  (!)  when  dre  deviee  has  jus.  been  mrned  on  or  restarted;  (2)  when  more 
dran  48  hours  has  passed  since  the  las.  time  ^e  device  was  unlock;  (3)  when  ttre  passcode  or 

password  has  no.  been  entered  in  the  lastbdays.  and  thedevice  has  not  been  unlocked  viaTouch 

ni  in  ttre  i^t  8  hours  or  ttre  deviee  has  not  been  unlocked  via  Face  ID  in  the  last  4  hours;  (4)  ttre 

devicehasr.ceivedaremoteloekconnntmd;or(5)f.veunsuccess&lattemptemu^^^^^ 

via  Touch  ID  or  Face  ID  ai'e  made. 

64.  The  passcodes  or  passwor  ds  ttrat  would  unlock  ttre  Subject  Devices  are  no.  known 

to  law  enfor^ment.  Thus,  it  wttl  likely  be  necessary  to  press  the  Angers  of  the  user  of  the  Subject 

Devrcestettredevices-Touch  ID  sensor,  or  hold  ttre  Subject  Devices  in  tout  oftheuser-sfac.  to 

acttvate  ttre  Face  ID  sensor,  in  an  attempt  to  unlock  tee  device  for  the  purpose  of  executtng  ttre 
search  authorized  by  teis  warrant  Att.mptt.rg  to  unlock  tee  relevant  Apple  devices  via  Touch 
,  Wite  ttre  use  of  ttre  fingerprints  of  tee  user,  or  via  Face  ID  by  holding  tee  device  in  ton.  of  ttre 
rrser-s  face,  is  necessary  because  ttre  government  may  not  ottrerwlse  be  able  to  access  tee  date 

conteinedonteosedevicesfortthe  purpose  of  executhrgteesearchauteorizedbyttrrswarr™^^ 
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65.  Based  on  these  facts  and  my  training  and  experience,  it  is  likely  that  Cohen  is  the 
user  of  tire  Subject  Devices,  and  thus  that  his  fmgerprtats  are  among  those  tot  are  abie  to  unlock 
the  Subject  Devices  via  Touch  ID  or  his  face  is  able  to  unlock  the  Subject  Devices  via  Face  ID. 

66.  Altough  I  do  no.  know  which  of  a  given  user's  10  fingerprints  is  capabie  of 

uniockingapa.tieutadevice.basedon  my  training  andexperiencelknowtotitis  — 

user  to  unlock  a  Touch  fD^snabled  Apple  device  via  the  fmgerprmts  on  thumbs  or  mdex  fing 
to  even.  dia.  law  enfomement  is  unable  to  unlock  to  Subject  Devices  as  described  above 

— - — — ---T-^T—rp-TAirTn-thi<rwill-simplY  result  in^he-deyico^^^ 

within  the  five  attempts  permitted  by  Touch  ID,  thia^Ul  simp  y 
entry  of  a  password  or  passcode  before  it  can  be  unlocked. 

67  I  also  know  from  my  training  and  experience,  and  my  review  of  publicly  available 

™teidaispublishedbyAppletotApplebranddevices.such.s.heSubiec.Devices.haveafe^^ 

tot  allows  a  user  to  erase  to  contents  of  to  device  remotely.  By  logging  into  to  Intrtot,  the 
user  or  any  otor  individual  who  possesses  to  user's  account  information  cmi  mke  slops  to 

comple.elywipe.becon.en«of.hedevice.torebydesUoyingevideuceoferlmlndconduck  along 

Wi4  any  otor  informafion  on  the  device.  The  ordy  means  to  p, event  tos  acton  is  to  disable  the 

device's  abiU^  «.  coimec.  to  to  Internet  immediately  upon  seizuie.  which  r^uires  eltor  access 

to  the  device  itself  to  alter  the  settings,  or  the  use  of  specialized  equipment  that  is  not  con 

available  to  law  enforcement  agents  at  every  arrest. 

6g  Due  «,  to  foregoing.  I  request  that  the  Court  autorlze  law  enforeementto  press 

tofingeia(toludingd,umbs)ofCohen.o.beTouchIDse„sorstoSubieetDevices.orholdto 

subject  Devices  hr  ftont  of  Cohen's  face,  for  the  pu^ose  of  ahemptog  to  unlock  to  Subject 
Devices  via  Touch  ID  or  Face  ID  in  order  to  search  the  contents  as  authorized  by  this  waiiant. 
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C.  Review  of  ESI 

69.  FoUowiiig  seizure  of  any  computer  deeices  and  storage  media  and/or  the  creation 
of  forensic  image  copies,  law  enforcement  personnel  (rncludrng,  rn  addrUon  to  law  entor 
offrcern  and  agents,  and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  Investigation  and 
related  proceedings,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel 
assisting  the  government  in  this  investigation,  and  outside  technical  experts  under  government 
contl-ol)  wffl  review  the  ESI  contained  therein  for  information  responsive  to  the  warrant. 

- =70— Irrconducting-this-revioWrlaw-enforcementpeiMimeUn^^ 

to  determine  whieh  fries  or  other  ESI  contain  evidence  or  fruits  of  the  Subject  Offenses.  Such 

techniques  may  includej  for  example. 

believed  to  contain  pertinent  files); 

^natoof  each  document  in  a  file  cabinet  to  detennme  rts  relevance); 

.  “scanning”  storage  areas  to  discover  and  possibly  recover  recently  deleted  data  or 
deliberately  hidden  files;  and 

■  'd^toSSeteSclrSdlp^^^^ 

the  investigation^'';  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
reding  how.  when,  and  by  whom  the  computer  was  used. 


’i  Keyword  searches  alone  are  typically  rnadequhe  to  ^d  videos,  do 

keyword  searches  work  only  data  thae  may  be  information  properly 

srto==-^"^ 

contain  the  keywords  being  searched. 
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71.  Law  enforcement  personnel  will  malce  reasonable  efforts  to  restrict  their  search  to 
data  falling  within  the  categories  of  evidence  speeifted  in  the  warrant.  Dependmg  on  the 
eircnmstances,  however,  law  enforcement  personnel  may  need  to  condnct  a  complete  review  of  all 
dte  ESI  from  setod  devices  or  storage  media  to  evaluate  its  contents  and  to  locate  all  data 

responsive  to  the  warrant. 

D.  Return  of  ESI 

72.  If  the  Government  determines  that  the  eleetronrc  devices  are  no  longer  necessary 
to  retrieve  and  preserve  the  data,  andWaSviddslhirmselw^^^ 

Federal  Rule  of  Criminal  Procedure  41  (c),  the  Government  will  return  these  items,  upon  request. 
Computer  data  that  is  encrypted  or  unreadable  will  not  be  returned  unless  law  enforcement 
personnel  have  determined  that  the  data  is  not  (i)  an  instrumentality  of  the  offense,  (ii)  a  fruit  of 
the  criminal  acttvity,  (lii)  contraband,  (iv)  otherwise  unlawfully  possessed,  or  (v)  evidence  of  the 

Subject  Offenses. 
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IV.  Conclusion  and  Ancillary  Provisions 

73.  Based  on  the  foregoing,  I  respectfully  request  the  court  to  issue  a  waitant  to  seize 
the  items  and  information  specified  in  Attachments  A,  B,  C,  D,  E  and  F  to  this  affidavit  and  to  the 
Search  and  Seizure  Warrants. 

74.  In  light  of  the  confidential  nature  of  the  continuing  investigation,  I  respectfully 
request  that  this  affidavit  and  all  papers  submitted  herewith  be  maintained  under  seal  until  the 
Comt  orders  odieiwise. 


Special  Agent 
FBI 


Sworn  to  before  me  on 
8th  day  of  April,  2018 

Icf  Py  _ 

HON.  HENRY  B.  PITMAN 

UNITED  STATES  MAGISTRATE  JUDGE 
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AO  93  (SONY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

•  for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of  ) 

(Briefly  describe  the  property  to  be  searched  )  ^ 

or  identify  the  person  by  name  and  address)  )  Case  No. 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1728,  ? 

New  York,  New  York  1 0065,  and  any  closed 
containers/items  contained  therein.  See  Attachment  D 


To:  ■  Any  authorized  law  enforcement  officer 

“™~^'7Aira^ficafion  hyXfed^  IWenforcWeffl  officei-orm-attorney^^^^^^ 

ofthe  following  person  or  property  located  in  the  Southern  District  of  - New  York - 


fidentiiv  the  verson  or  describe  the  property  to  be  searched  and  give  its  location) ,  ,  \  j.  *  n  ^ 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1728,  New  York,  New  York  10065,  and  any  closed  containers/items 
contained  therein,  See  Attachment  D 


The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 

property  to  be  seized)": 


See  Attachment  D 


property. 


:  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 

A-W--IS  _ 


YOU  ARE  COMMA3SIDED  to  execute  this  warrant  on  or  before  ^ _ 

(not  to  exceed  14  days) 

gf  in  the  daytime  6:00  a.m.  to  1 0  p.m.  □  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

established. 


Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property  , 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  dmmg  the  execution  of  the  Warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  of  the  Comt. 

Unon  its  retmn.  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Court. - - 

- - - — - - ^ -  XJSMJlnitiah 


O  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  1 8  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 

searched  or  seized  (check  the  appropriate  box)  Ofor  _ days  (not  to  exceed  30). 

□until,  the  facts  justifyiirg,  the  later  specific  date  of  _ _ 

Date  and  time  issued:  M  - 

^  V  /  Judge  s  signature 


City  and  state:  New  York.  NY 


Hon.  Henry  B.  Pitman.  U.S.  Magistrate  Judge 

Printed  name  and  title 
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AO  93  (Rev.  01/09)  Search  and  Seizure  Warrant  (Page  2) _ _ _ _ _ 


Case  No.: 


Return 

Date  and  time  warrant  executed: 


Copy  of  warrant  and  inventory  left  with: 


Inventory  made  in  the  presence  of : 

Inventory  of  tiie  property  taken  and  name  of  any  person(s)  seized: 


”  ■  Certification  

I  declare  under  penalty  of  peijury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court. 


Date; 


Executing  officer's  signature 


Printed  name  and  tide 
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ATTACBMENTD 

I,  Premises  to  be  Searched— Subject  Premises-4 

The  premises  to  be  searched  (“Subject  Premises-4”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein: 

Room  1728  located  inside  the  Loews  Regency  Hotel  at  540  PMc  Avenue,  New  York,  New 
York  10065.  The  building  is  a  luxury  hotel  located  on  Park  Avenue  and  61st  Street.  Subject 
Premises-4  is  located  on  the  17th  floor  of  the  hotel. 

It — ItmiisTo-Be-Seized -  ’  ^ 


A.  Evidence,  Fruits,  and  Instrum  entalities  of  the  Sub  j  ect  Offenses 

The  items  to  be  seized  Rom  Subject  Premises-4  are  evidence,  fruits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  banlc  entries),'  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(banlc  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

'  a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 

medallions,  finm  January  1, 2013  to  the  present. 


b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfem^nto^  in  taxi  medallions,  and  any  associated  debts  'or 
liabilities,  to  others,  including  tc^Ujmand/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 


d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  natoe 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants, 


e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  iuHicatp.  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 


f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
2013  to  the  present. 


Cohen  andl 


^uidpoc^N^in^^^^meements,  loans,  and/or  financial  frMsaction^^^we^^ 
^^^^^^^^^^^^^^^^^and/or  entities  controlled 
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JL^  L-VJ  LAJL*-^ 


and  any  payments  by 


to  Cohen,  ftom  January 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agi'eements . 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Truinp  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Kai'en  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  Americm  Media,  Inc., 

David  Pecker,  and/or  Dylan  Howai'd  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal.  _  _ _ _ 

Ic.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign, 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  hr  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 


present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  pmpose  of  an  accomit  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
fitianoial  transactions  involving  that  financial  institution,  from  January  1, 2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-4  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  r[.A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  Pro, 
any  other  desktop  and  laptop  computers,  any  Apple  iPhone  or  other  ceUphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  diives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  horn  Subject  Premises-4  also  include: 

1 .  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media;,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  enciyption  keys,  or  similar  mformation. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 

'devices~dmrtorage“media;“including~any“hardware-or“Sofiware-manuals-oi— other— informalion 

concerning  the  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. 

- 3_^ - -^y-evidenee  concerning-theldentities  or-locations  ofithosepersons-withaccess-to,™^ 

control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
personnel  assisting  the  government  in  tMs  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therem  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

•  suiweying  various  file  '^directories”  and  the  individual  files  they  contain  (analogous  to 
looldng  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

®  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  deteimine 
their  precise  contents; 

•  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

•  performing  key  word  searches  through  all  elecironic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configumtion  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search,  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
HA  and  n.B  of  this  Attachment,  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  mview  of  all  the  ESI  fi-oin  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedm-es  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to 
address-potentiahpiivileges, - ^ - — - — -  - ^ ^ 
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IV.  Conclusion  and  Ancillary  Provisions 

73 .  Based  on  the  foregoing,  I  respectfully  request  the  court  to  issue  a  warrant  to  seize 
the  items  and  information  specified  in  Attachments  A,  B,  C,  D,  E  andp  to  this  affidavit  and  to  the 
Search  and  Seizure  Warrants. 

74.  In  light  of  the  confidential  nature  of  tlie  continuing  investigation,  I  respectfully 
request  that  this  affidavit  and  all  papers  submitted  herewith  be  maintained  under  seal  until  the 
Court  orders  otherwise. 


Special  Agent 
FBI 


Sworn  to  before  me  on  __ 

8th  day  of  April,  2018  (  :>l-  '  /  h  ‘  ~ 


HON..HEFlBy  PITMAN 
UM-liiD  STATES  AlAdlSTR.4TE  lUDGE 
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United  States  District  Court 

for  the 

Southern  District  of  New  York 

In  the  Matter  of  the  Search  of 
(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1628, 

New  York,  New  York  10065,  and  any  closed 
containers/items  contained  therein,  See  Attachment  A 

SEARCH  AND  SEIZURE  WARRANT 


Case  No 


18 MAG  2968 


To:  Any  authorized  law  enforcement  officer 


An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 
of  the  following  person  or  property  located  in  the  _ Southern  District  of  _ New  York _ 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location): 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1628  (a  suite  encompassing  rooms  1628,  1629,  and  1630) 
(collectively,  “Room  1628”),  New  York,  New  York  10065,  and  any  closed  containers/items  contained  therein,  See 
Attachment  A 

The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized) : 


See  Attachment  A  / 

I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 
property. 

YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before  ^  ^  ■  '  ;  ;  ; 

(not  to  exceed  14  days) 

Sf  in  the  daytime  6:00  a.m.  to  10  p.m.  □  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

established. 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 


The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  of  the  Court. 

□  Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Court,  ,  _  ^ _ 

>  USMJ  Initials 

:  P-U  ^  , 

□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C.  §  2705  (except  for  delay 

of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whdse  property,  will  be 
SQQTchQd  or  SQlZQd  (check  the  appropriate  box)  Gfor  days  (not  to  exceed 30),  '  V 

□until,  the  facts  justifying,  the  later  specific  d^e  of  ;  ; 


Date  and  time  issued: 


City  and  state: 


/ f 


New  York.  NY 


z. 


Z  Judge 's  signatur^ 


Hon.  Henry  B.  Pitman.  U.S.  Magistrate  Judge 

Printed  name  and  title 
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AO  93  (Rev,  01/09)  Search  and  Seizure  Warrant  (Page  2) 


Return 

Case  No.: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 

Certification 

I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court. 


Date:  _  _ _ 

Executing  officer  *s  signature 


Printed  name  and  title 
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ATTACHMENT  A 

I.  Premises  to  be  Searched — Subject  Premises-4 

The  premises  to  be  searched  (“Subject  Premises-4”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein: 

Room  1628  (a  suite  encompassing  rooms  1628,  1629,  and  1630)  (collectively,  “Room 
1628”),  located  inside  the  Loews  Regency  Hotel  at  540  Park  Avenue,  New  York,  New  York 
10065.  The  building  is  a  luxury  hotel  located  on  Park  Avenue  and  61st  Street.  Subject  Premises- 
4  is  located  on  the  16th  floor  of  the  hotel. 

n.  Items  to  Be  Seized 


A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from  Subject  Premises-4  are  evidence,  fruits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfe^n^ntere^  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to^^^^^^^^^and/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d.  Evidence  relating  to  Essential  Consultants,  EEC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  ^d  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 

f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
20 13  to  the  present. 

g.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

Cohen  and  and/or  by 
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1,  2012  to  the  present. 


I  and  any  payments  byl 


Ito  Cohen,  from  January 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 


i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
T)avidJPecker,^and/DJLDylan„HoLward_about_D_onaldJrrump,  the_  Trump_Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 


l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
pa5nnent  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-4  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  n.A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  Pro, 
any  other  desktop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-4  also  include: 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  information 
concerning  the  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. 

3.  Any  evidence  concerning  the.identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

•  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

•  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

•  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

•  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 


I- 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
11.  A  and  II.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to 
address  potential  privileges. 
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AO  93  (SONY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of  ) 

(Briefly  describe  the  property  to  be  searched  ) 

or  identify  the  person  by  name  and  address)  ^  Case  No. 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1628,  ^ 

New  York,  New  York  10065,  and  any  closed  ^ 

containers/items  contained  therein,  See  Attachment  A  ^ 

SEARCH  AND  SEIZURE  WARRANT 

To:  Any  authorized  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 
of  the  following  person  or  property  located  in  the  Southern  District  of  _ New  York 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location)'. 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1628  (a  suite  encompassing  rooms  1628,  1629,  and  1630) 
(collectively,  “Room  1628”),  New  York,  New  York  10065,  and  any  closed  containers/items  contained  therein,  See 
Attachment  A 

The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)'. 

See  Attachment  A 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 


property. 


YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before  1 L- 1 


(not  to  exceed  14  days) 

Sf  in  the  daytime  6:00  a.m.  to  10  p.m.  □  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

established. 


Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  of  the  Court. 

□  Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Court. _ 

USMJ  Initials 

□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C.  §  2705  (except  for  delay 

of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 
searched  or  seized  (check  the  appropriate  box)  Gfor  _ days  (not  to  exceed  30). 

□until,  the  facts  justifying,  the  later  specific  date  of  _ 


Date  and  time  issued:  ^  (“S  "7  i  5^  j 

^4 

1  i- 

1 

1  Judge  *s  signature 

City  and  state:  New  York,  NY _  _ Hon.  Henry  B.  Pitman.  U.S.  Magistrate  Judge 

Printed  name  and  title 
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AO  93  (Rev.  01/09)  Search  and  Seizure  Warrant  (Page  2) 


Return 

Case  No.: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 

Certification 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court. 


Date:  _  _ 

Executing  officer  *s  signature 


Printed  name  and  title 
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ATTACHMENT  A 

I.  Premises  to  be  Searched — Subject  Premises-4 

The  premises  to  be  searched  (“Subject  Premises-4”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein; 


Room  1628  (a  suite  encompassing  rooms  1628,  1629,  and  1630)  (collectively,  “Room 
1628”),  located  inside  the  Loews  Regency  Hotel  at  540  Park  Avenue,  New  York,  New  York 
10065.  The  building  is  a  luxury  hotel  located  on  Park  Avenue  and  61st  Street.  Subject  Premises- 
4  is  located  on  the  16th  floor  of  the  hotel. 

II.  Items  to  Be  Seized 

A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from  Subject  Premises-4  are  evidence,  fruits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 


b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  trans|er^nvhiterest  in  taxi  medallions,  and  any  associated  debts  or 

Imd/or  entities  associated  with  him. 


liabilities,  to  others,  including  tol 


c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 


d.  Evidence  relating  to  Essential  Consultants,  EEC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 


e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 


f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
2013  to  the  present. 


g.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 
Cohen  and  ^^^^^^^^^^^^^^^^^^^and/or  entities  controlled  by| 
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1,  2012  to  the  present. 


and  any  payments  by 


to  Cohen,  from  January 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 


i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 


j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 


o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-4  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  II.A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  Pro, 
any  other  desktop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-4  also  include: 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  information 
concerning  the  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. 

3.  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
persormel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

•  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

•  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

•  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

•  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
II.A  and  II.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to 
address  potential  privileges. 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 
Associated  with  the  Email  Accounts 


Maintained  at 
Premises  Controlled  by  Google,  Inc., 
the  Email  Account 

Maintained  at  Premises  Controlled  by 
Oath,  Inc.,  and  the  Email  Account 
maintained  at 

Premises  Controlled  by  1  &  1  Internet, 
Inc.,  USAO  Reference  No. 
20I8R0OI27 


TO  BE  FILED  UNDER  SEAL 
AGENT  AFFIDAVIT 


Agent  Affidavit  in  Support  of  Application  for  a  Search  Warrant 
for  Stored  Electronic  Communications 


STATE  OF  NEW  YORK 
COUNTY  OF  NEW  YORK 


) 

)  ss. 
) 


Special  Agent! 


the  United  States  Attorney’s  Office  for  the  Southern 
District  of  New  York,  being  duly  sworn,  deposes  and  states; 

L  Introduction 
A.  Affiant 

1 .  I  am  a  Special  Agent  with  the  United  States  Attorney’s  Office  for  the  Southern  District 
of  New  York  (the  “USAO”).  I  have  been  a  Special  Agent  with  the  USAO  since  August  2016.  I 
previously  served  as  a  Special  Agent  with  the  United  States  Department  of  Labor  Inspector 
General  from  May  2011  to  August  2016.  In  the  course  of  my  experience  and  training  in  these 
positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a  wide  array 
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of  financial  crimes,  including  frauds  on  financial  institutions.  I  also  have  training  and  experience 
executing  search  warrants,  including  those  authorizing  the  search  of  email  accoxmts. 

B.  The  Provider,  the  Subject  Account  and  the  Subject  Offenses 

2.  I  make  this  affidavit  in  support  of  an  application  for  a  search  warrant  pirrsuant  to  18 
U.S.C.  §  2703  for  all  content  and  other  information  associated  with  the  email  accounts 


@gmail.com  (the  “Cohen  Account”), 


l^gmail.com  (the  “| 
Account”),  and 
“Subject  Accounts”).  The  Cohen  Account, 


Account”), 
l@aol.com  (the 


(the  “MDCPC 
(the 

[Account”)  (collectively,  the 
Account,  and 


Account  are  maintained  and  controlled  by  Google,  Inc.,  headquartered  at  1600  Amphitheatre 
Parkway,  Mountain  View,  California  94043  (“Google”),  the  MDCPC  Account  is  maintained  and 
controlled  by  1  &  T  Internet,  Inc.,  headquartered  at  701  Lee  Road,  Suite  300,  Chesterbrook, 
Pennsylvania  19087  (“1  &  1”),  and  th^^^jAccount  is  maintained  and  controlled  by  Oath,  Inc., 
22000  AOL  Way,  Dulles,  Virginia  20166  (“Oath”)  (together,  the  “Providers”).  The  information 
to  be  searched  is  described  in  the  following  paragraphs  and  in  Attachments  A,  B,  C  and  D  to  the 
proposed  warrants. 

3.  As  detailed  below,  there  is  probable  cause  to  believe  that  the  Subject  Accounts  contain 
evidence,  fruits,  and  instrumentalities  of  violations  of  18  U.S.C.  §  371  (conspiracy  to  defraud  the 
United  States),  1005  (false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (banlc  fraud)  (collectively,  the  “Subject  Offenses”).  The  Target  Subjects  of 
this  investigation  are  MICHAEL  COHEN  (“Cohen”)  and  others  known  and  unknown.  This 
affidavit  is  based  upon  my  personal  laiowledge,  my  review  of  documents  produced  pursuant  to 
grand  jury  subpoenas  and  prior  search  warrants,  my  review  of  interview  reports  prepared  by  other 
law  enforcement  officers,  and  my  conversations  with  other  law  enforcement  officers,  as  well  as 
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my  training  and  experience  concerning  the  use  of  email  in  criminal  activity.  Because  this  affidavit 
is  being  submitted  for  the  limited  purpose  of  establishing  probable  cause,  it  does  not  include  all 
the  facts  I  have  learned  during  my  investigation.  Where  the  contents  of  documents  and  the  actions, 
statements,  and  conversations  of  others  are  reported  herein,  they  are  reported  in  substance  and  in 
part,  except  where  otherwise  indicated. 

C.  Services  and  Records  of  the  Provider 

4.  I  have  learned  the  following  about  the  Providers; 

a.  The  Providers  offer  email  services  to  the  public.  In  particular,  Google  permits 

subscribers  to  maintain  email  accounts  under  the  domain  name  gmail.com.  Google  also  allows  a 
subscriber  to  maintain  email  accounts  under  any  domain  name  under  the  subscriber’s  control.  For 
example,  if  a  subscriber  controls  the  domain  name  ‘  Google  enables  the  subscriber 

to  host  any  email  address  under  this  domain  name  on  servers  operated  by  Google.  Oath  permits 
subscribers  to  maintain  email  accounts  under  the  domain  name  aol.com.  1  &  1  permits  subscribers 
to  maintain  email  accounts  under  any  domain  name  under  the  subscriber’s  control.  For  example, 
if  a  subscriber  controls  the  domain  nam(^^^^^^^’  1  &  1  enables  the  subscriber  to  host  any 
email  address  under  this  domain  name  on  servers  operated  by  1  &  1.  A  subscriber  using  the 
Providers’  services  can  access  his  or  her  email  account  from  any  computer  coimected  to  the 
Intemet. 

b.  The  Providers  maintain  the  following  records  and  information  with  respect  to  every 
subscriber  account: 

i.  Email  contents.  In  general,  any  email  (which  can  include  attachments  such 
as  documents,  images,  and  videos)  sent  to  or  from  a  subscriber’s  account,  or  stored  in  draft  form 
in  the  account,  is  rhaintained  on  the  Providers’  servers  unless  and  until  the  subscriber  deletes  the 
email.  If  the  subscriber  does  not  delete  the  email,  it  can  remain  on  the  Providers’  computers 
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indefinitely.  Even  if  the  subscriber  deletes  the  email,  it  may  continue  to  be  available  on  the 
Provider’s  servers  for  a  certain  period  of  time. 

ii.  Address  hook.  The  Providers  also  allow  subscribers  to  maintain  the 
equivalent  of  an  address  book,  comprising  email  addresses  and  other  contact  information  of  other 
email  users. 

iii.  Subscriber  and  billing  information.  The  Providers  collect  and  maintain 
(typically  unverified)  identifying  information  about  each  subscriber,  including,  for  example,  name, 
username,  address,  telephone  number,  and  alternate  email  addresses.  The  Providers  also  maintain 
records  concerning  the  date  on  which  the  account  was  created,  the  Internet  protocol  (“IP”)  address 
of  the  user  at  the  time  of  account  creation,  the  current  status  of  the  account  {e.g.,  active  or  closed), 
the  length  of  service,  and  the  t3q)es  of  services  utilized  by  the  subscriber.  Additionally,  for  paying 
subscribers,  the  Providers  maintain  records  of  the  subscriber’s  means  and  source  of  payment, 
including  any  credit  card  or  bank  account  number. 

iv.  Transactional  information.  The  Providers  also  typically  retain  certain 
transactional  information  about  the  use  of  each  account  on  its  system.  This  information  cm  include 
records  of  login  {i.e.,  session)  times  and  durations  and  the  methods  used  to  connect  to  the  account 
(such  as  logging  into  the  account  through  the  Providers’  website). 

V.  Customer  correspondence.  The  Providers  also  typically  maintain  records 
of  any  customer  service  contacts  with  or  about  the  subscriber,  including  any  inquiries  or 
complaints  concerning  the  subscriber’s  account. 

vi.  Search  history.  Google  and  Oath  also  typically  maintain  records  of  any 
search  history  or  web  history  associated  with  the  subscriber’s  account. 


02.28.2018 


4 


Case  l:18-cr-00602-WHP  Document  48-3  Filed  07/18/19  Page  5  of  67 


vii.  Associated  content.  Google  also  typically  maintains  content  and  records 
relating  to  the  following  applications  that  are  associated  with  its  e-mail  accounts:  (A)  “Google 
Docs,”  which  provides  document-editing  software  that  can  be  used  to  create,  share,  store,  and 
manage  documents  online;  (B)  “Google  Drive,”  which  enables  users  to  store  files  on  Google 
servers,  where  they  can  be  accessed  remotely  by  the  user  and  others;  and  (C)  “Gchat”  or  “Instant 
Messenger,”  which  provides  a  chat  interface  through  which  users  can  communicate  with  each 
other  in  real  time.  Oath  also  typically  maintains  content  and  records  relating  to  AOL  instant 
message,  which  provides  a  chat  interface  through  which  users  can  communicate  with  each  other 
in  real  time. 

viii.  Preserved  and  backup  records.  The  Providers  also  maintain  preserved 
copies  of  the  foregoing  categories  of  records  with  respect  to  an  account,  for  at  least  90  days,  upon 
receiving  a  preservation  request  from  the  Government  pursuant  to  18  U.S.C.  §  2703(f).  The 
Providers  may  also  maintain  backup  copies  of  the  foregoing  categories  of  records  pursuant  to  its 
own  data  retention  policy. 

D.  Jurisdiction  and  Authority  to  Issue  Warrant 

5.  Pursuant  to  1 8  U.S.C.  §§  2703(a),  (b)(1)(A)  &  (c)(1)(A),  the  Government  may  require 
a  provider  of  an  electronic  communications  service  or  a  remote  computing  service,  such  as  the 
Providers,  to  disclose  all  stored  content  and  all  non-content  records  or  other  information  pertaining 
to  a  subscriber,  by  obtaining  a  warrant  issued  using  the  procedures  described  in  the  Federal  Rules 
of  Criminal  Procedure. 

6.  A  search  warrant  under  §  27 03  may  be  issued  by  “any  district  court  of  the  United  States 
(including  a  magistrate  judge  of  such  a  court)”  that  “has  jurisdiction  over  the  offense  being 
investigated.”  18  U.S.C.  §  2711  (3)(A)(i). 
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7.  When  the  Government  obtains  records  under  §  2703  pursuant  to  a  search  warrant,  the 
Government  is  not  required  to  notify  the  subscriber  of  the  existence  of  the  warrant.  18  U.S.C. 
§  2703(a),  (b)(1)(A),  (c)(2)  &  (3).  Additionally,  the  Government  may  obtain  an  order  precluding 
the  Provider  from  notifying  the  subscriber  or  any  other  person  of  the  warrant,  for  such  period  as 
the  Court  deems  appropriate,  where  there  is  reason  to  believe  that  such  notification  will  seriously 
jeopardize  an  investigation.  18  U.S.C.  §  2705(b). 

E.  Prior  Applications 

8.  On  or  about  July  1 8, 2017,  in  connection  with  an  investigation  being  conducted  by  the 
Oflice  of  the  Special  Counsel  (“SCO”),  the  Federal  Bureau  of  Investigation  (“FBI”)  sought  and 
obtained  from  the  Honorable  Beryl  A.  Howell,  Chief  United  States  District  Judge  for  the  District 
of  Columbia,  a  search  warrant  for  emails  in  the  Cohen  Account  sent  or  received  between  January 
1,  2016  and  July  18,  2017.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  from 
Judge  Howell  search  warrants  for  emails  in  the  Cohen  Account  sent  or  received  between  June  1, 
2015  and  November  13,  2017,  and  emails  in  the  MDCPC  Account  sent  or  received  between  the 
opening  of  the  account  and  November  13,  2017.  The  SCO  has  since  referred  certain  aspects  of 
their  investigation  into  Cohen  to  the  USAO,  which  is  worldng  with  the  FBI’s  New  York  Field 
Office.  As  part  of  that  referral,  the  SCO  provided  the  USAO  with  emails  and  other  content 
information  obtained  pursuant  to  the  search  warrants  executed  by  the  SCO,  which  had  already 
been  reviewed  for  privilege.  *  As  discussed  below,  this  affidavit  is  based  in  part  on  my  review  of 


^  In  an  abundance  of  caution,  in  a  separate  application  the  USAO  has  sought  authorization, 
pursuant  to  Fed.  R.  Crim.  P.  41,  to  review  the  emails  obtained  pursuant  to  the  Prior  Cohen  Account 
Warrants  for  evidence  related  to  certain  additional  conduct  that  was  not  the  focus  of  the  Prior 
Cohen  Account  Warrants.  The  emails  obtained  from  the  Prior  Cohen  Account  Warrants  that  relate 
to  that  additional  conduct  do  not  form  a  basis  for  the  instant  application. 
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responsive  materials  produced  pursuant  to  the  July  1 8  and  November  1 3 , 20 1 7  warrmits  (the  “Prior 
Cohen  Accoxmt  Warrants”). 

9.  On  or  about  November  7, 2017,  and  January  4, 2018,  as  well  as  certain  prior  dates,  the 
SCO  sought  and  obtained  from  Judge  Howell  orders  authorizing  and  extending  the  installation  and 
use  of  pen  registers  and  trap  and  trace  devices  to  record  communications  sent  to  or  from  the  Cohen 
Account.  The  SCO  has  provided  pen  register  data  obtained  pursuant  to  those  orders  to  the  USAO. 
This  affidavit,  as  discussed  below,  is  based  in  part  on  my  review  of  the  pen  register  data  obtained 
pursuant  to  the  November  7, 201 7  and  January  4,  20 1 8  orders  (the  “Pen  Register  Data”). 

10.  On  or  about  February  16,  2018,  the  USAO  sought  and  obtained  from  the  Honorable 
Debra  Freeman,  United  States  Magistrate  Judge  for  the  Southern  District  of  New  York,  an  order 
pursuant  to  18  U.S.C.  §  2703(d)  for  email  header  information  associated  with  the  MDCPC 
Account.  This  affidavit,  as  discussed  below,  is  based  in  part  on  my  review  of  email  header 
information  produced  by  1  &  1  in  response  to  that  order  (the  “MDCPC  Header  Information”), 
n.  Probable  Cause 

A.  Overview 

1 1 .  The  United  States  Attorney  ’  s  Office  for  the  Southern  District  of  New  York  and  FBI  are 
investigating,  among  other  things,  a  scheme  by  Target  Subject  Michael  Cohen  to  defraud  multiple 
banks.  Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President 
Donald  Trump,  and  who  previously  served  for  over  a  decade  as  an  executive  in  the  Trump 
Organization,  an  international  conglomerate  with  real  estate  and  other  holdings. 

12.  The  investigation  has  revealed  that  Cohen  has  made  affirmative  misrepresentations  in 
and  omitted  material  information  from  financial  statements  and  other  disclosures  that  Cohen 
provided  to  multiple  banks  in  connection  with  a  transaction  intended  to  relieve  Cohen  of 
approximately  $22  million  in  debt  he  owed  on  taxi  medallion  loans  from  the  banks.  As  set  forth 
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in  detail  below,  in  these  financial  statements,  and  in  his  oral  and  other  written  statements  to  these 
banks,  Cohen  appears  to  have  (i)  intentionally  omitted  cash  assets  that  he  began  receiving  in  2017 
from  new  consulting  work;  (ii)  significantly  understated  his  total  holdings  of  cash  and  cash 
equivalents;  and  (iii)  failed  to  inform  the  banks  from  which  he  was  seeking  debt  relief  that  he  had 
agreed  to  make  a  $3.8  million  cash  payment  to  a  third  party,  in  connection  with 

acquisition  of  the  taxi  medallions  securing  Cohen’s  debt.  By  making  these 
misrepresentations  and  material  omissions,  Cohen  avoided  making  monthly  payments  on  his 
loans,  and  attempted  to  and  had  secured  proposed  agreements  from  the  banks  to  relieve  him  of 
certain  repayment  obligations  worth  millions  of  dollars. 

13.  Based  on  my  review  of  emails  obtained  from  the  Prior  Cohen  Account  Warrants, 

MDCPC  Header  Information,  and  documents  produced  pursuant  to  subpoenas,  I  have  learned  that 
Cohen  has  used  the  Cohen  Account  and/or  MDCPC  Accoxmt  to,  among  other  things,  (i) 
communicate  with  and  attomeyJH^H^H 

about  the  proposed  transfer  of  Cohen’s  medallions  and  associated  debts;  (ii)  negotiate  a  pay-down 
of  the  principal  amount  of  the  taxi  medallion  loans;  (iii)  communicate  with  his  accountant  about 
the  contents  of  the  false  financial  statements  at  issue;  and  (iv)  send  those  false  financial  statements 
to  banks.  Additionally,  the 

Account,  .^^^^^^^^^4ccount  and^^jA-Ccoimt,  respectively,  to  communicate  with  Cohen 
about  the  status  of  the  taxi  medallion  transaction,  and  to  send  relevant  financial  statements  to 
banks.  Accordingly,  and  as  set  forth  in  more  detail  below,  there  is  probable  cause  to  believe  that 
the  Subject  Accounts  will  include  evidence  of  the  Subject  Offenses. 

B.  Cohen’s  Statements  to  Sterling  National  Bank 

14.  As  set  forth  in  detail  below,  in  2014,  Cohen,  through  limited  liability  corporations 
(“LLCs”)  controlled  by  him  and  his  wife,  Laura  Cohen,  entered  into  a  series  of  loans  from  Sterling 
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National  Bank  (“Sterling”)  and  the  Melrose  Credit  Union  (“Melrose”),  secured  by  taxi  medallions, 
for  approximately  $20  million.  Though  entered  into  by  LLCs,  the  loans  were  also  secured  by 
personal  guarantees  in  the  names  of  both  Cohen  and  his  wife.  Over  time,  as  the  taxi  industry 
weakened  and  the  medallions  were  devalued,  Cohen  sought  to  renegotiate  the  terms  of  those  loans 
and/or  relieve  himself  from  their  obligations,  including  the  personal  guarantees.  As  part  of  that 
effort,  Cohen  made  a  series  of  representations  to  Sterling  and  Melrose  about  his  net  worth,  assets, 
available  cash,  and  financial  outlook.  Specifically,  based  on  my  review  of  records  maintained  by 
Sterling  and  Melrose,  and  public  sources  concerning  the  taxi  industry  and  the  value  of  taxi 
medallions,  as  well  as  my  review  of  reports  prepared  by  law  enforcement  officers  of  interviews 
with  a  Sterling  executive  vice-president  (the  “Sterling  Employee-1”)  and  my  participation  in  an 
interview  with  a  Sterling  employee  (the  “Sterling  Employee-2”),  I  have  learned,  among  other 
things,  the  following: 

a.  Taxi  medallions  are  small  metal  plaques  affixed  to  taxis.  Without  a  medallion,  it 
is  illegal  to  operate  a  taxi  in  cities  with  medallion  systems,  such  as  New  York  City.  Cohen  and  his 
wife  own  multiple  LLCs  that  collectively  own  32  taxi  medallions  (each  LLC  owns  two 
medallions).^  Cohen’s  purchase  of  these  New  York  taxi  medallions  was  originally  financed  by 
loans  from  Capital  One  Bank,  for  which  the  medallions  served  as  collateral.  Cohen  was  not  a  taxi 
operator,  and  leased  his  medallions  to  a  third  party.  That  third  party  made  monthly  payments  to 
Cohen,  who  in  turn  used  some  of  those  proceeds  to  pay  his  monthly  loan  payments. 

b.  In  early  2014,  Cohen  became  a  customer  of  Sterling  when  he  sought  to  refinance  a 
mortgage  on  a  rental  property  that  he  owned.  In  or  around  April  2014,  Cohen  raised  with  Sterling 


^  One  of  these  companies.  Mad  Dog  Cab  Corp.,  was  jointly  owned  by  Sondra  Cohen,  who  I 
believe  is  Cohen’s  mother. 
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the  prospect  of  refinancing  his  taxi  medallion  loans,  which  were  then  at  Capital  One  Bank.  By  in 
or  about  September  2014,  Cohen  began  negotiating  a  lending  transaction  with  Sterling  that  would 
allow  Cohen  to  pay  off  his  loans  at  Capital  One  and  borrow  more  money  from  the  then-increase  m 
value  of  the  medallions.  According  to  Sterling  Employee- 1,  in  2014,  prior  to  the  recent  upheaval 
in  the  taxi  industry — as  a  result  of  the  emergence  of  ride-sharing  services,  such  as  Uber — ^taxi 
medallion  loans  were  viewed  by  banks  and  investors  as  safe,  short  term  credits,  as  the  market  value 
of  taxi  medallions  was  consistently  rising.  Consequently,  taxi  medallion  loans — like  the  loans  held 
by  Cohen — were  frequently  refinanced  at  increasing  amounts  as  the  value  of  the  medallions  rose. 
According  to  Sterling  Employee- 1,  borrowers  typically  cashed  out  the  increase  in  the  loan  amount 
and  used  the  additional  ftinds  for  other  purposes.  Cohen  appears  to  have  followed  this  approach  in 
2014,  when  he  agreed  to  refinance  his  medallion  loans  for  approximately  $22  million,  which — 
according  to  letters  from  Capital  One  Bank  in  Sterling’s  files — ^was  greater  than  his  previous  debt 
at  Capital  One  Bank  ($21  million,  of  which  $14.6  million  was  a  line  of  credit  to  Cohen).  This 
allowed  Cohen  to  cash  out  the  proceeds  from  the  transaction. 

c.  Based  on  my  review  of  records  maintained  by  Sterling,  I  have  learned  that  on  or 
about  December  8,  2014,  each  of  Cohen’s  sixteen  taxi  medallion  corporations  entered  mto  loan 
agreements  and  promissory  notes  with  Sterling  for  the  principal  sum  of  $  1,375,000,  with  repayment 
due  on  December  8,  2016.  Each  loan  was  signed  by  Michael  or  Laura  Cohen,  depending  on  who 
was  the  sole  shareholder  of  the  corporation.  The  loans  were  also  each  secured  by  a  security 
agreement,  dated  the  same  day,  making  the  medallions  collateral  for  the  notes.  To  give  Sterling 
additional  security,  Michael  and  Laura  Cohen  signed  personal  guarantees  and  confessions  of 
judgment,  giving  Sterling  the  right  to  pursue  collection  against  the  Cohens’  personal  assets  were 
their  corporations  to  default  under  the  loan  agreements.  In  total.  Sterling  agreed  to  lend 
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approximately  $22  million  to  the  Cohens’  companies.  Pursuant  to  participation  agreements, 
Sterling  transferred  45  percent  of  that  debt  to  Melrose.^  Under  the  terms  of  Sterling’s  participation 
agreements  with  Melrose,  Sterling  was  precluded  from  amending  or  modifying  the  loans  without 
the  consent  of  Melrose. 

d.  In  evaluating  Cohen’s  requested  refinancing  of  the  taxi  medallions,  Sterling  (and 
Melrose,  consistent  with  its  participation  in  the  deal)  conducted  due  diligence.  At  Sterling’s 
request,  Cohen  provided  Sterling  with  a  statement  of  financial  condition,  dated  August  1,  2014 
(the  “August  2014  Financial  Statement”),  which  indicated  that  Cohen  had  $100,740,000  in  total 
assets,  $23,550,000  in  total  liabilities,  and  a  net  worth  of  $77,190,000."^  From  my  review  of  a 
Sterling  credit  memorandum,  dated  September  29,  2014,  I  know  that  Sterling  viewed  the 
transaction  favorably  because,  accounting  for  loan  payments,  cash  flows  from  the  medallions  were 
projected  to  be  positive,  the  value  of  the  collateral  (as  estimated  by  Sterling)  exceeded  $42  million, 
and  the  net  worth  of  Cohen — ^who  was  the  direct  obligor  under  the  guarantee  agreements — was 
over  $77  million.  An  internal  Sterling  credit  and  risk  rating  analysis  report,  dated  October  20, 
2014,  recommended  approval  of  the  loans  for  substantially  the  same  reasons. 

e.  Based  on  my  review  of  records  maintained  by  Sterling  and  public  sources,  I  have 
learned  that  over  time,  the  collateral  backing  Cohen’s  loans  (taxi  medallions)  lessened  in  value  due 
to  the  rise  in  ride-sharing  companies  and  significant  devaluation  of  taxi  medallions.  Additionally, 
Cohen  began  falling  behind  on  loan  payments  to  Sterling  and  Melrose.  I  know  from  records 

maintained  by  Sterling  and  an  interview  with  Sterling  Employee-2  that,  begiiming  in  or  around 

^  Melrose,  which  had  a  business  principally  focused  on  taxi  medallion  loans,  is  now  in 
conservatorship  by  the  National  Credit  Union  Administration  (“NCUA”). 

^  Cohen  subsequently  provided  Sterling  with  a  revised  statement  of  financial  condition,  also 
dated  August  1, 2014,  which  reported  assets  of  $99,420,000,  total  liabilities  of  $23,550,000,  and  a 
net  worth  of  $75,870,000. 
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September  2015,  Cohen  told  Sterling,  in  sum  and  substance,  that  the  individual  leasing  Cohen’s 
medallions  had  fallen  behind  in  making  payments  to  Cohen,  and  that  as  a  result,  the  monthly  cash 
flow  from  his  taxi  medallions  had  been  reduced,  leaving  him  with  a  shortfall  of  approximately 
$16,000  each  month.  For  instance,  I  have  reviewed  an  email  from  Sterling  Employee-2,  dated 
September  9, 2015,  summarizing  a  call  with  Cohen — ^which  according  to  the  email  and  toll  records 
for  Cohen’s  cellphone  occurred  on  September  8,  2015 — during  which  Cohen  told  Sterling 
Employee-2,  in  sum  and  substance,  about  his  cash  flow  problems  and  a  monthly  shortfall  of 
approximately  $16,000.  In  that  same  email,  Sterling  Employee-2  commented  that  despite  Cohen’s 
statements,  his  personal  financial  information  “indicate[d]  a  strong  ability  to  make  up  the  difference 

in  payments.”  Cohen,  however,  according  to  Sterling  Employee-2,  pushed  the  bank  for  a  reduction 

/ 

in  Cohen’s  monthly  payments. 

f.  From  my  review  of  records  maintained  by  Sterling  and  my  participation  in  an 
interview  with  Sterling  Employee-2,  I  have  learned  that  Cohen  and  Sterling  Employee-2  spoke 
again  on  September  28,  2015,  and  that  during  the  call  Cohen  stated,  in  sum  and  substance,  that  the 
individual  to  whom  Cohen  leases  the  medallions  had  again  reduced  monthly  payments  to  Cohen.  I 
know  from  my  review  of  records  maintained  by  Sterling  that  between  in  or  about  September  2015 
and  November  2015,  Sterling  raised  the  possibility — ^both  internally  and  with  Cohen — of  Cohen 
posting  his  real  estate  holdings,  personal  residence,  or  some  other  collateral  as  additional  security 
for  the  banks.  According  to  these  records,  however,  Cohen  resisted  these  requests.  From  my  review 
of  loan  documents  and  records  maintained  by  Sterling,  I  know  that  in  or  about  November  2015,  as 
a  result  of  Cohen’s  representation  that  he  was  not  earning  sufficient  returns  on  his  medallions  to 
cover  monthly  interest  payments.  Sterling  and  Melrose  agreed  to  amend  their  loans  with  Cohen  by. 
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among  other  things,  reducing  the  interest  rate  Cohen  paid  to  Melrose  and  extending  the  loan 
maturity  date  to  December  8, 2017. 

g.  I  know  from  interviews  with  Sterling  Employee- 1  and  Sterling  Employee-2,  as  well 

as  emails  I  have  reviewed,  that  in  or  about  October  2016,  Cohen  told  Sterling  Employee- 1  that 
Cohen  had  a  potential  buyer  of  his  taxi  medallions,  named  ^^^^^^^^^|who  would  agree  to 
assume  Cohen’s  debt  with  Sterling  and  Melrose.  Based  on  my  review  of  records  maintained  by 
Sterling,  as  well  as  the  interviews  with  Sterling  Employee- 1  and  Sterling  Employee-2  referenced 
above,  I  know  that  by  or  before  October  2016,  Cohen  had  entered  into  negotiations  to  sell  his  sixteen 
corporate  taxi  medallions  who  is  a  medallion  owner  and  taxi  operator,  for  the 

balance  of  the  loans,  which  at  the  time  was  $21,376,000.  I  know  from  my  review  of  records 
maintained  by  Sterling,  and  my  participation  in  an  interview  with  Sterling  Employee-2,  that  as  a 
condition  of  the  transfer  of  the  medallion  loans — and  because  Sterling  was  unfamiliar  with^^^| 

— Sterling  requested  that  Cohen  make  a  substantial  principal  pa5nnent  on  the  loan,  of 
approximately  one  million  dollars,  prior  to  the  transfer.  Cohen  rejected  this  request  initially.  But 
on  or  about  Jtuiuary  3 1 , 20 1 7,  Cohen  told  Sterling  Employee- 1 ,  in  sum  and  substance,  that  he  would 
make  a  one  million  dollar  principal  reduction  payment  in  order  to  move  forward  with  the  medallion 
transfer  deal  with  Indeed,  in  an  email  sent  from  the  Cohen  Account  to  Sterling 

Employee-2  on  or  about  February  22, 2017,  Cohen  confirmed  that  he  “agreed  to  pay  down  1  million 
from  the  loan  amount.” 

h.  Pursuant  to  the  participation  agreements  between  Sterling  and  Melrose,  Sterling 

was  required  to  secure  Melrose’s  agreement  to  participate  in  the  transfer  of  the  taxi  medallion  debt 
from  Cohen  to  On  or  about  April  17,  2017,  Sterling  sent  a  memorandum  to 

Melrose  summarizing  the  terms  of  the  proposed  transaction,  and  noting  the  requirement  that 
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Melrose  agree  to  the  terms.  On  or  about  May  2,  2017,  emailed  Sterling 

Employee-1  from  the  mm|||||^^|A.ccount  to  inquire  about  the  status  of  the  transaction. 
Sterling  Employee- 1  responded  to  at  the  ^^^^^^^^^^^Account  that 

Mehose  had  agreed  to  the  deal,  and  that  Sterling  would  be  sending  a  term  sheet 

shortly. 

i.  In  order  for  the  banks  to  evaluate  the  proposed  transaction  fully,  they  requested 
financial  information  from  the  parties.  On  or  about  October  26, 2016,  a  Sterling  employee  emailed 
the  ^^^^^^^^^^^^Account  about  the  “Cohen  Medallion  Purchase,”  and  stated  “[i]n  order  to 
proceed  with  the  assumption  of  Michael’s  loans,”  Sterling  needed  certain  financial  information 

from^^^^^^^^^^^^^^^^^^^^^fesponded  the^^^^^^^^^^Account, 

the  Account,  that  he  would  send  a  financial  statement  and  tax 

returns  shortly.  Additionally,  on  or  about  June  7,  2017,  Sterling  Employee-!  emailed  Cohen  to 
request  an  “updated  personal  financial  statement,”  completed  jointly  with  Cohen’s  wife,  and 
Cohen’s  most  recent  federal  income  tax  return.  On  or  about  June  8,  2017,  Cohen  emailed  Sterling 
Employee- 1  from  the  Cohen  Account,  attaching  a  Sterling  personal  financial  statement  form  that 
had  been  filled  out  by  hand,  which  referenced  a  statement  of  financial  condition,  dated  May  1, 
2017  (the  “May  2017  Financial  Statement”),  that  was  also  attached.  The  May  2017  Financial 
Statement  included  a  cover  letter  from  Cohen’s  accountant,  Jeffrey  Getzel,  stating,  in  sum  and 
substance,  that  the  information  in  the  statement  came  from  Cohen  and  that  Getzel  had  not 
confirmed  its  accuracy  or  completeness.  The  May  2017  Financial  Statement  stated  that  Cohen  had 
total  assets  of  $41,955,000,  total  liabilities  of  $39,130,000,  and  a  net  worth  of  $2,825,000.  The 
May  2017  Financial  Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in 
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cash,  $26,155,000  in  closely  held  companies  (such  as  the  taxi  medallion  entities  and  his  real  estate 
holdings),  $3,200,000  in  real  estate  investments,  and  his  $11,000,000  personal  residence. 

j.  Based  on  my  review  of  reports  of  law  enforcement  interviews  of  Sterling 
Employee-1, 1  have  learned  that  Sterling  Employee-1  reviewed  each  line  of  the  May  2017  Financial 
Statement  with  Cohen  to,  among  other  things,  verify  its  accuracy,  and  Sterling  Employee-1  asked 
Cohen  about  the  cash  amount  listed  on  the  May  2017  Financial  Statement.  Cohen  stated  to  Sterling 
Employee-1,  in  sum  and  substance,  that  the  May  2017  Financial  Statement  was  accurate. 

k.  On  or  about  August  16,  2017,  Sterling  Employee-1  emailed  Cohen  at  the  Cohen 
Account  and 

sheet  memorializing  the  potential  transaction  between  Sterling,  Melrose,  Cohen,  and 

mailed  Sterling  Employee- 1  from  thel 
Account,  requesting  that  he  be  included  on  “all  future  e-mails  to 

concerning  this  matter,”  and  providing  proposed  edits  to  the  term  sheet.  On  or  about 
August  30,  2017,  Sterling  Employee-1  emailed 
Account,  Cohen  at  the  Cohen  Account,  and  Hat  the  Account,  and  provided  them  with  a 
revised  term  sheet.  On  or  about  September  5,  2017,  Sterling  Employee-1  sent^^^^^^^^^| 
at  the  ^^^^^^^^^^|\ccount,  Cohen  at  the  Cohen  Accoimt,  and-^^^rt  the  ^^^kccount  a 
copy  of  the  executed  term  sheet.  According  to  the  term  sheet,  would  borrow 

$20,000,000  from  Sterling  and  Melrose,  to  be  secured  by  the  medallions  that  ^^^^^|was  to 
acquire  from  Cohen. 

l.  As  part  of  the  agreement,  according  to  the  term  sheet,  $1,265,913  in  principal  (which 
is  what  would  remain  after  the  $20,000,000  payment  on  the  outstanding  loan  balance)  would  be 
repaid  by  Cohen  and  the  two  banks,  with  Cohen  paying  fifty  percent  and  the  banks  dividing  the 


and/or  J 


On  or  about  August  29,  2017, 


I  at  the 


Account,  attaching  a  non-binding  term 
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remaining  half  of  the  balance.  Based  on  my  review  of  an  internal  Sterling  credit  memorandxun, 
dated  October  4, 2017,  the  parties  reached  a  preliminary  agreement  that  Cohen  would  pay  $632,956 
of  the  remaining  $1,265,912  principal  loan  balance,  and  Sterling  and  Melrose  would  absorb 
$357,167  and  $275,789  respectively  in  the  form  of  charge-offs.  According  to  Sterling  Employee- 
1,  Sterling  was  willing  to  divide  the  repayment  of  the  outstanding  principal  balance — despite  its 
prior  insistence  that  Cohen  make  a  principal  pay-down  of  at  least  one  million  dollars — ^because 
Cohen  represented  on  a  telephone  call  with  Sterling  Employee- 1 ,  in  sum  and  substance,  that  he  had 
insufficient  liquidity  to  pay  the  full  outstanding  principal  balance.  As  part  of  the  agreement,  Sterling 
and  Mehose  also  agreed  to  relieve  Cohen  and  his  wife  of  the  personal  guarantees  that  they  made 

Itransaction,  Cohen  would  no  longer 


on  behalf  of  the  LLCs.  Thus,  after  completing  the 
have  had  any  outstanding  obligations  to  Sterling  or  Melrose. 

m.  Based  on  my  review  of  emails  sent  by  Sterling  employees,  I  have  learned  that 
because  the  transaction  between  the  parties  was  subject  to  full  credit  underwriting  by  Sterling  and 
Melrose  (as  well  as  Melrose’s  regulators  at  NCUA),  in  August  and  September  2017,  Sterling 


required  and  requested  additional  financial  statements  for  Cohen  and 


for  its  credit 


xmderwriting  process.  In  response  to  Sterling’s  requests,  on  or  about  October  5,  2017, 


sent  from  the 


Account  to  a  Sterling  employee  a  copy  of 


personal  financial  statement.  The  financial  statement  lists  the! 


Accoimt  as  the  email  contact  fori 


I.  Additionally,  on  or  about  October  5,  2017, 


Cohen,  using  the  Cohen  Account,  re-sent  Sterling  Employee-2  a  copy  of  his  May  2017  Financial 
Statement.  A  day  later,  on  October  6,  2017,  Cohen,  using  the  Cohen  Account,  emailed  Sterling 
Employee-2  a  statement  of  financial  condition,  dated  September  30,  2017  (the  “September  2017 
Financial  Statemenf ’). 


16 


02.28.2018 


Case  l:18-cr-00602-WHP  Document  48-3  Filed  07/18/19  Page  17  of  67 


n.  Like  the  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
included  a  cover  letter  from  Jeffrey  Getzel,  Cohen’s  accountant,  stating,  in  sum  and  substance,  that 
the  information  in  the  statement  came  from  Cohen,  and  that  Getzel  had  not  confirmed  its  accuracy 
or  completeness.  The  September  2017  Financial  Statement  stated  that  Cohen  had  total  assets  of 
$33,430,000,  total  liabilities  of  $45,630,000,  and  a  negative  net  worth  of  $12,200,000.  Notably, 
rmlike  Cohen’s  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
represented  to  Sterling  that  Cohen  had  a  negative  net  worth.  The  September  2017  Financial 
Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in  cash,  $17,630,000  in 
closely  held  companies  (such  as  the  taxi  medallion  entities  and  his  real  estate  holdings),^ 
$3,200,000  in  real  estate  investments,  and  his  $11,000,000  personal  residence  (which,  for  the  first 
time,  he  indicated  was  held  in  trust).  The  September  2017  Financial  Statement  included  assets  and 
liabilities  not  held  in  Cohen’s  name,  such  as  various  entities  associated  with  his  taxi  medalhons  and 
some' of  his  real  estate  investment  entities. 

o.  From  my  participation  in  an  interview  with  Sterling  Employee-2,  and  my  review  of 
records  maintained  by  Sterling,  I  have  also  learned  that  at  or  around  the  time  Cohen  provided 
Sterling  with  these  financial  statements — in  or  around  September  2017^ — Cohen  stopped  paying 
monthly  loan  payments  on  his  taxi  medallion  loans  altogether.  According  to  Sterling  Employee- 
2,  Cohen  informed  Sterling,  in  sum  and  substance,  that  he  had  insufficient  funds  to  pay  the  monthly 
principal  and  interest  payments  on  his  medallion  loans.  By  in  or  about  December  2017,  Sterling 
and  Melrose  had  not  been  paid  approximately  $276,937.92  in  monthly  principal  and  interest 
payments  on  the  medallion  loans.  Based  on  Cohen’s  financial  condition  as  conveyed  in  the 

^Notably,  the  September  2017  Financial  Statement  valued  each  of  Cohen’s  thirty-two  New 
York  taxi  medallions  at  approximately  $180,187.50,  whicl^va^considerably  less  than  the 
$650,000  valuation  ascribed  to  each  medallion  in  the  Cohen-^^^^^|term  sheet. 
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September  2017  Finaneial  Statement,  and  his  delinquency  in  making  payments  to  Sterling,  among 
other  things,  the  bank’s  credit  underwriting  committee  determined  (and  memorialized  in  a 
December  2017  memorandum)  that  the  Cohen-’^^^^^|transaction  was  favorable  for  the  bank 
-  that  is,  that  j^^^^^would  be  a  better  borrower  than  Cohen. 

p.  On  or  about  December  26,  2017,  Sterling  sent  Cohen  a  demand  letter  requesting 
the  immediate  receipt  of  past-due  loan  payments.  On  December  29,  2017,  Sterling  sent  Cohen  a 
letter  stating  that  he  was  in  default  under  the  loans  between  Sterling  and  Cohen’s  medallion 
corporations.  Cohen  did  not  make  an  immediate  payment  on  the  loans,  but  instead  sent  an  e-mail 
to  Sterling  Employee-1  on  or  about  January  24, 20 1 8,  from  the  Cohen  Account,  stating  that  during 
the  closing  of  the  Cohen- j^^^^Hfransaction,  Cohen  would  “bring  all  payments  up  to  date  as 
well  as  deposit  the  payoff  differential.”  Cohen  also  requested  by  email  sent  from  the  Cohen 
Account  on  January  24,  2018,  that  at  the  closing  of  the  Cohen- 
provide  a  letter  stating  that  all  of  Cohen’s  debts  have  been  satisfied  and  that  Cohen’s  personal 
guarantees  of  the  medallion  loans  had  been  terminated. 

q.  The  Cohen- 


attomey,  emailed  attorneys  for  Sterling  from  the^^^|kccount 
and  stated  that  “at  this  time  there  is  no  deal  with  Michael  Cohen.  Some  of  the  numbers  have 
changed  and  we  are  not  prepared  to  go  forward.” 

r.  Based  on  my  participation  in  the  interview  with  Sterling  Employee-2  and  my 
review  of  records  maintained  by  Sterling,  I  know  that  after  the  Cohen-^^^^^^|deal  fell  apart. 
Sterling  assigned  Cohen’s  loans  to  an  employee  at  Sterling  who  specializes  in  collecting  on 
defaulting  loans  (“Sterling  Employee-3”).  From  my  review  of  telephone  call  notes,  I  know  that 
Sterling  Employee-3  spoke  to  Cohen  on  or  about  January  30,  2018  about  paying  down  and/or 


transaction,  however,  did  not  close.  On  or  about  January 


transaction.  Sterling 
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restructuring  Cohen’s  outstanding  taxi  medallion  loans.  Based  on  my  review  of  an  email  between 
Sterling  Employee-3  and  Cohen,  I  know  that  on  the  January  30,  2018  call,  Cohen  stated  that  he 
would  send  a  “corrected  current”  version  of  his  personal  financial  statement.  Following  that  call, 
on  or  about  January  31,  2018,  Cohen  emailed  Sterling  Employee-3  from  the  Cohen  Account  a 
copy  of  the  September  2017  Financial  Statement.  Later  that  day,  Cohen  again  emailed  Sterling 
Employee-3  from  the  Cohen  Account  and  proposed  paying  $500,000  to  bring  the  loans  current 
and  $750,000  to  bring  the  principal  balance  to  $20,500,000.  Cohen  also  suggested  revised  monthly 
interest  payment  amounts.  On  or  about  January  31,  2018,  Sterling  Employee-3  responded  to 
Cohen  at  the  Cohen  Account  and  stated,  in  sum  and  substance,  that  Cohen  would  need  to  pay  the 
entirety  of  the  overdue  payments  and  pay  down  the  principal  balance  of  the  loan  to  $20,000,000 
(in  total,  a  payment  of  approximately  $  1 ,750,000),  and  would  need  to  make  larger  monthly  interest 
payments. 

s.  On  or  about  February  1,2018,  Cohen  emailed  Sterling  Employee-3  from  the  Cohen 
Account  and  proposed  “[p]ayment  of  $1.250m  which  ALL  can  be  used  to  pay  down  principal,  if 
[Sterling]  will  waive  past  due  amounts,”  but  stated  “I  do  NOT  have  more  than  the  $1.250m.” 
(Emphasis  in  original.)  Cohen  also  stated,  in  sum  and  substance,  that  he  had  insufficient  financial 
resources  to  post  additional  collateral  or  pre-fund  monthly  payments.  Based  on  my  participation 
in  an  interview  with  Sterling  Employee-2, 1  have  learned  that  Sterling  continues  to  renegotiate  the 
medallion  loans  with  Cohen  based  on  Cohen’s  representations  about  his  current  financial  position. 
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C.  Cohen  Made  Material  Misrepresentations  About  His  Finances  to  Banks 

Cohen  Concealed  from  Sterling  and  Melrose  Cash  Derived  from  Consulting  Work 

15.  As  set  forth  in  detail  below,  despite  multiple  representations  by  Cohen  to  Sterling  (and, 
by  extension,  Mehose^)  that  he  had  insufficient  funds  to  pay  down  the  principal  balance  of  the 
medalhon  loans,  make  monthly  interest  payments,  or  pay  past-due  amoimts,  it  appears  that 
between  2016  and  the  present,  Cohen  opened  and  maintained  bank  accounts  at  First  Republic  Bank 
(“Fhst  Republic”),  and  then  received  millions  of  dollars  in  purported  consulting  payments  in  these 
accounts,  which  he  did  not  disclose  to  Sterling.  Cohen  set  up  these  accounts  and  received  these 
funds  during  the  very  period  in  which  he  made  disclosures  to  Sterling  about  his  personal  finances 
(including  his  assets  and  liabilities)  and  his  ability  to  make  payments  on  the  medallion  loans.  In 
these  disclosures  to  Sterling — and  despite  being  asked  about  these  bank  accounts  by  his 
accoimtant — Cohen  withheld  information  about  liquid  financial  assets  at  First  Republic. 

16.  Specifically,  based  on  my  review  of  documents  and  bank  records  produced  pursuant  to 
a  subpoena  by  First  Republic,  and  my  participation  in  and  review  of  reports  of  interviews  with  two 
First  Repubhc  employees,  I  have  learned,  among  other  things,  the  following: 

a.  Cohen  and  his  wife  have  been  customers  of  First  Republic  since  approximately 
June  2011.  Cohen  controls  several  checking  and  loan  accounts,  some  in  his  own  name  and  others 
in  the  names  of  corporate  entities. 


^  Based  on  my  review  of  a  report  of  an  interview  conducted  with  an  employee  of  Melrose,  I 
have  learned  that,  pursuant  to  the  participation  agreement  between  Sterling  and  Melrose,  Cohen’s 
financial  statements  and  other  records  in  Sterling’s  possession  were  forwarded  to  Melros^^iat 
Melrose  could  make  a  determination  as  to  whether  to  approve  of  the  Cohen-^^^^^H 
transaction.  Based  on  my  review  of  reports  of  interviews  wi<j^^^j^^employees,  l  also  Know 
that  Cohen  called  employees  at  Melrose  regarding  the  Cohen-^^^^^B  transaction. 
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b.  On  or  about  October  26,  2016,  in  Manhattan,  New  York,  Cohen  opened  a  new 
checking  account  at  First  Republic  in  the  name  of  Essential  Consultants  LLC  (the  “Essential 
Consultants  Account”).  Cohen  was  the  only  authorized  signatory  on  the  account.  When  Cohen 
opened  the  Essential  Consultants  Account,  a  First  Republic  employee  (“First  Republic  Employee- 
1”)  conducted  an  in-person  interview  of  Cohen.  In  response  to  a  series  of  know-your-customer 
questions’  about  the  purpose  of  the  account — ^the  answers  to  which  First  Republic  Employee-1 
entered  into  a  form^ — Cohen  stated,  in  sum  and  substance,  that  he  was  opening  Essential 
Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting  work, 
and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States.  Cohen 
also  stated,  in  sum  and  substance,  that  his  purpose  in  setting  up  the  account  was  to  keep  the  revenue 
from  his  consulting  business — ^which  he  said  was  not  his  main  source  of  income — separate  from 
his  personal  finances.  As  set  forth  below,  there  is  probable  cause  to  believe  that  Cohen’s 
statements  about  the  intended  purpose  of  the  accormt  and  source  of  funds  for  the  account  were 
false.  Specifically,  the  account  was  not  intended  to  receive — and  does  not  appear  to  have 
received — ^money  in  connection  with  real  estate  consulting  work;  in  addition,  the  account  has 
received  substantial  payments  from  foreign  sources. 

c.  First,  on  or  about  October  27,  2016— the  day  after  he  opened  the  Essential 
Consultants  Account,  Cohen  used  the  account  to  wire  $130,000  to  an  account  held  in  the  name  of 
attorney  Keith  Davidson’s  law  firm.  Based  on  my  review  of  emails  between  Cohen  and  Davidson, 


’  Certain  financial  institutions  are  required  to  conduct  such  procedures  pursuant  to  the  Bank 
Secrecy  Act  and  its  implementing  regulations.  See  31  U.S.C.  §  5318;  31  C.F.R.  §  1020.220. 

^  First  Republic  Employee- 1  first  filled  out  the  form  on  the  day  he  interviewed  Cohen,  October 
26,  2016.  On  or  about  December  19,  2016,  at  the  request  of  bank  compliance  persoimel.  First 
Republic  Employee-1  updated  the  form  to  add  more  detail  about  Cohen’s  statements. 
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obtained  pursuant  to  the  Prior  Cohen  Account  Warrants,  I  believe  that  this  payment  did  not  relate 
to  any  real  estate  consulting  work,  but  rather  was  a  “settlement”  payment  made  to  Davidson’s 
client.  ®  Based  on  my  review  of  public  sources,  I  have  learned  that  Davidson’s  client  is  alleged  to 
have  had  an  extramarital  affair  with  Donald  Trump.  On  or  about  February  13, 2018,  Cohen  made 
a  public  statement  that  “[i]n  a  private  transaction  in  2016,  I  used  my  own  personal  funds  to 
facilitate  a  payment  of  $130,000  to  [Davidson’s  client].” 

d.  Second,  I  know  from  my  review  of  First  Republic  bank  records  that  were  scheduled 
by  an  FBI  forensic  accountant  that  after  Cohen  opened  the  Essential  Consultants  Account,  Cohen 
received  payments  into  that  accoimt  from  foreign  businesses  and  entities  that  do  not  reflect  the 
stated  client  profile  for  the  residential  and  commercial  real-estate  consulting  services.  Specifically, 
from  my  review  of  the  Essential  Consultants  Account  schedule  and  public  sources,  I  know  the 
following: 

i.  Beginning  on  or  about  January  31,  2017,  Cohen  began  receiving  monthly 
payments  of  $83,333  from  an  entity  called  Columbus  Nova  LLC,  which  were  deposited  into  the 
Essential  Consultants  Account.  According  to  public  sources,  Columbus  Nova  is  an  investment 
management  firm  controlled  by  Renova  Group,  an  industrial  holding  company  based  in  Zurich, 
Switzerland  that  is  controlled  by  Russian  national  Viktor  Vekselberg.  From  January  2017  to 
August  2017,  the  Essential  Consultants  Account  received  seven  payments  totaling  $583,332.98 
from  Columbus  Nova  LLC. 


^  Specifically,  I  have  learned  from  my  review  of  bank  records  that  on  or  about  October  26, 
2016,  Cohen  transferred  $131,000  from  a  home  equity  line  of  credit  account  at  First  Republic  to 
the  Essential  Consultants  Account;  on  or  about  October  27,  2016,  Cohen  transferred  $130,000 
from  the  Essential  Consultant  Account  to  an  account  held  in  the  name  of  Davidson’s  law  firm  at  a 
bank  based  in  Los  Angeles;  and  on  or  about  November  1,  2016,  a  wire  transfer  in  the  amount  of 
approximately  $96,645  was  made  from  Davidson’s  account  to  a  bank  account  in  the  name  of 
Davidson’s  client. 
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ii.  Beginning  on  or  about  April  5,2017,  Cohen  began  receiving  payments  from 
Novartis  Investments,  SARL,  which  I  believe  to  be  the  in-house  financial  subsidiary  of  the  Swiss 
pharmaceutical  company  Novartis  International  AG  (“Novartis”).  Between  April  2017  and  January 
2018,  the  Essential  Consultants  Account  received  ten  wire  payments  from  a  Swiss  bank  account 
held  in  the  name  of  Novartis,  each  in  the  amount  of  $99,980,  for  a  total  of  $999,800. 

iii.  Beginning  in  or  about  April  2017,  the  Essential  Consultants  Account  started 
receiving  wire  payments  from  a  bank  account  associated  with  the  telecommunications  company 
AT&T  Inc.  (“AT&T”).  Specifically,  on  or  about  April  14,  2017,  AT&T  wired  $100,000  to  the 
Essential  Consultants  Account  and,  from  in  or  about  June  2017  to  in  or  about  January  2018,  the 
Essential  Consultants  Account  received  nine  $50,000  payments  from  AT&T.  In  total,  AT&T  wired 
$550,000  to  the  Essential  Consultants  Account. 

iv.  On  or  about  May  10,  2017,  June  9,  2017,  July  10,  2017,  and  November  27, 
2017,  the  Essential  Consultants  Account  received  four  deposits  in  the  amount  $150,000  (totaling 
$600,000)  from  a  bank  account  in  South  Korea.  The  account  holder  from  which  the  money  was 
sent  is  Korea  Aerospace  Industries  Ltd.  (“KAI”).  KAI  is  a  South  Korea-based  company  that 
produces  and  sells  fixed-wing  aircraft,  helicopter  aircraft,  and  satellites  to  the  United  States 
Department  of  Defense,  among  other  customers. 

V.  On  or  about  May  22,  2017,  the  Essential  Consultants  Account  received  a 
$150,000  deposit  from  an  account  at  Kazkommertshank,  a  Kazakhstani  bank.  The  listed  account 
holder  at  Kazkommertsbank  was  a  second  Kazakhstani  bank  named  BTA  Bank,  AO.  A  message 
accompanying  the  wire  payment  indicated  that  the  payment  was  a  “monthly  consulting  fee  as  per 
Inv  BTA-101  DD  May  10,  2017  consulting  agreement  W/N  DD  08  05  2017  CNTR  W/NDD 
08/05/2017.” 
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vi.  In  total,  from  on  or  about  January  31, 2017  to  on  or  about  January  10, 2018, 
the  Essential  Consultants  Aeeount  received  approximately  $2,883,132.98  in  transfers  and  checks 


from  the  aforementioned  entities.  As  of  on  or  about  January  1 0,  20 1 8,  the  balance  in  the  Essential 
Consultants  Account  was  $1,369,474.23. 


e.  On  or  about  April  4,  2017,  Cohen  opened  another  new  checking  account  at  First 


Republic,  this  one  in  the  name  of  Michael  D.  Cohen  &  Associates,  P.C.  (the  “MDC&A  Account”). 
Cohen  was  the  only  authorized  signatory  on  the  account.  Among  other  things,  the  MDC&A 


Account  received  ten  wire  transfers  and  one  check  from  an  account  in  the  name  of  Squire  Patton 


Boggs,  a  law  firm.  In  total,  from  on  or  about  April  5,  2017,  to  on  or  about  January  2,  2018,  the 
MDC&A  Account  received  $426,097.70  in  deposits,  and  the  balance  in  the  account  as  of  January 
2,  2018,  was  $344,541.35.  As  discussed  below,  Cohen  never  disclosed  any  of  the  balance  in  the 
Essential  Consultants  or  MDC&A  accounts  to  Sterling  during  the  negotiations  with  respect  to  the 
 transaction,  including  in  his  May  2017  Financial  Statement  and  September  2017 
Financial  Statement. 

17.  Based  on  my  review  of  emails  from  the  Cohen  Account  that  were  seized  pursuant  to 
the  Prior  Cohen  Account  Warrants,  and  my  review  of  reports  of  interviews  with  employees  of 
AT&T  and  Novartis,  it  appears  that  the  aforementioned  payments  to  the  Essential  Consultants 
Accoimt  and  MDC&A  Account  ostensibly  were  for  political  consulting  work,  including  consulting 
for  intemational  clients  on  issues  pending  before  the  Trump  administration.  Specifically,  from 
my  review  of  emails  from  the  Cohen  Account  and  public  sources,  I  have  learned  the  following: 


Based  on  my  review  of  public  sources,  I  have  learned  that  Cohen  is  not  registered  as  a 


lobbyist  or  as  a  person  acting  as  an  agent  of  foreign  principals,  as  may  have  been  required  by  the 
Foreign  Agents  Registration  Act. 
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a.  On  or  about  April  28,  2017,  Cohen  sent  an  email  from  the  Cohen  Account  to  an 
individual  whom  I  believe  is  affiliated  with  KAI.  In  the  email,  Cohen  attached  a  document 
purporting  to  be  a  “Consulting  Agreement”  between  KAI  and  Essential  Consultants  dated  as  of 
about  May  1,  2017.  The  document  indicates  that  Essential  Consultants  would  render  “consulting 
and  advisory  services,  as  requested”  by  KAI,  and  that  KAI  would  pay  Essential  Consultants  “a 
consulting  fee  of  One  Million  Two  Hundred  Thousand  ($1,200,000.00)  US  Dollars,”  disbursed 
through  eight  $150,000  installments  between  May  2017  and  December  2017. 

b.  On  or  about  May  10,  2017,  Cohen  sent  an  email  from  an  alternate  email  address, 
copying  the  Cohen  Account,  to  an  employee  of  BTA  Banlc.  To  the  email,  Cohen  attached  an 
invoice  to  BTA  Bank  in  the  name  of  Essential  Consultants.  The  invoice  contemplated  a  $150,000 
payment  to  Essential  Consultants  for  a  “monthly  consulting  fee.” 

c.  On  or  about  February  13, 2017,  Cohen  emailed  an  AT&T  employee  from  the  Cohen 
Account  what  appears  to  be  a  consulting  agreement,  which  contemplates  that  Essential  Consultants 
“shall  render  consulting  and  advisory  services  to  [AT&T]”  and  that  AT&T  would  “advise  [Essential 
Consultants]  of  those  issues  and  matters  with  respect  to  which  AT&T  Services  desires  [Essential 
Consultants] ’s  assistance  and  advice.”  The  contract  calls  for  AT&T  “to  pay  the  Consultant  for  his 
services  ...  a  consulting  fee  of  Fifty  Thousand  ($50,000)  Dollars  .  .  .  per  month.”  Based  on  my 
review  of  reports  of  interviews  with  AT&T  employees,  I  have  learned  that  AT&T  retained  Cohen 
to  consult  on  political  issues,  including  net  neutrality,  the  merger  between  AT&T  and  Time  Warner, 
and  tax  reform. 

d.  On  or  about  January  17,  2017,  Cohen  emailed  to  a  representative  of  Novartis  from 
the  Cohen  Account  a  contract  between  Novartis  and  Essential  Consultants,  which  provides  that 
Essential  Consultants  will  “provide  consulting  and  advisory  services  to  Novartis  on  matters  that 
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relate  to  the  repeal  and  replacement  of  the  Affordable  Care  Act  in  the  US  and  any  other  issues 
mutually  agreeable  to  [Essential  Consultants]  and  Novartis.”  The  contract  provides  for  a 
“consulting  fee  of  One  Million  Two  Hundred  Thousand  ($1,200,000)  US  dollars,”  to  be  paid  to 
Essential  Consultants  in  even  monthly  installments  over  the  course  of  a  year.  Based  on  my  review 
of  reports  of  interviews  with  Novartis  employees,  I  have  learned  that  Novartis  retained  Cohen  to 
provide  political  consulting  services  and  to  gain  access  to  relevant  policymakers  in  the  Trump 
Administration. 

e.  On  or  about  April  3,  2017,  Squire  Patton  Boggs,  a  law  firm,  announced  on  its 
website  that  is  had  formed  a  “strategic  alliance”  with  Michael  D.  Cohen  &  Associates  and  would 
“jointly  represent  clients.” 

18.  Despite  the  significant  amount  of  money  that  Cohen  received  into  the  Essential 
Consultants  Account  and  the  MDC&A  Account,  and  the  cash  balance  in  both  accounts,  Cohen  did 
not  disclose  that  information  to  Sterling  or  Melrose.  Specifically,  based  on  my  review  of  documents 
provided  by  Getzel,  and  my  review  of  and  I 

have  learned  the  following: 

a.  In  or  about  May  2017,  Getzel  met  with  Cohen  at  a  law  firm  in  Manhattan,  New 
York.  At  the  meeting,  Cohen  told  Getzel,  in  sum  and  substance,  that  he  had  set  up  a  law  practice 
called  Michael  D.  Cohen  &  Associates  P.C.,  and  a  consulting  company  called  Essential  Consultants 
LLC.  Cohen  told  Getzel,  in  sum  and  substance,  that  he  expected  to  earn  $75,000  per  month  in 
connection  with  his  law  practice,  and  that  he  expected  gross  revenues  for  the  consulting  business  to 
be  between  five  and  six  million  dollars  annually. 

b.  In  or  about  October  2017,  if  not  earlier,  Getzel  was  preparing  a  personal  financial 
statement  for  Cohen.  On  or  about  October  6,  2017,  Getzel  sent  an  email  to  Cohen  at  the  Cohen 
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Account  in  which  Getzel  wrote  that  “[a]ttached  is  a  draft  of  the  new  PFS  as  of  September  30, 2017” 
and  attached  a  draft  of  the  September  2017  Financial  Statement.  The  draft  statement  reflected  that 
as  of  September  30,  2017,  Cohen  had  only  $1,250,000  in  cash,  total  assets  of  approximately 
$33,430,000  (comprised  of  taxi  medallion  interests,  real  estate  interests,  and  his  personal  residence 
and  property),  and  liabilities  of  approximately  $45,630,000,  leaving  him  purportedly  over  $12 
million  in  debt.  In  the  same  email,  Getzel  questioned  Cohen,  in  sum  and  substance,  about  the  fact 
that  the  financial  statement  did  not  list  any  assets  associated  with  either  the  Essential  Consultants 
Account  or  the  MDC&A  Account:  “[w]e  did  not  add  any  value  for  you[r]  two  operating  entities  - 
Michael  D.  Cohen  &  Associates  POC  [.szc]  and  Essential  Consultants  EEC.  Please  advise  whether 
or  not  these  should  be  disclosed  and  what  value.” 

c.  On  or  about  October  6,2017,  Cohen  called  Getzel  by  telephone — ^which  is  reflected 
on  toll  records  for  Cohen’s  cellphone — and  told  Getzel,  in  sum  and  substance,  not  to  include 
Essential  Consultants  or  MDC&A  in  the  September  2017  Financial  Statement  because  they  had  no 
value. 

d.  On  or  about  October  6, 20 1 7,  following  the  call  with  Getzel,  Cohen,  using  the  Cohen 
Account,  responded  to  Getzel’s  email  with  the  answer  “[IJooks  good  to  me.”  Cohen  never  directed 
Getzel  to  make  any  changes  to  his  cash  position  as  listed  in  the  September  2017  Financial 
Statement.  Neither  Essential  Consultants  nor  MDC&A  was  listed  on  the  September  20 1 7  Financial 
Statement  that  was  provided  to  Sterling. 

19.  Based  on  the  foregoing,  and  from  my  review  of  banlc  records  and  emails  sent  by  Cohen 
to  Sterling,  I  know  that  the  September  2017  Financial  Statement  made  no  mention  whatsoever  of 
assets  that  Cohen  held  in  the  Essential  Consultants  Account  or  the  MDC&A  Account.  As  of 
September  30,  2017 — the  date  of  the  September  2017  Financial  Statement — Cohen  had 
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approximately  $673,729.95  in  the  Essential  Consultants  Account  and  $248,619.28  in  the  MDC&A 
Account.  As  of  October  6, 2017,  the  date  when  Getzel  asked  Cohen  about  the  two  accounts,  Cohen 
had  approximately  $823,709.95  in  the  Essential  Consultants  Account  and  $248,619.28  in  the 
MDC&A  Account. 

Cohen  Understated  His  Available  Cash 

20.  In  addition  to  withholding  the  existence  of  the  Essential  Consultants  Account  and  the 
MDC&A  Account  from  Sterling  and  Melrose,  it  appears  that  Cohen  also  substantially  understated 
his  available  cash  and  cash  equivalents  m  his  financial  disclosures.  Specifically,  I  know  from  my 
review  of  the  September  2017  Financial  Statement  that  Cohen  provided  to  Sterling  that  Cohen 
represented  that  he  had  $1,250,000  in  cash  as  of  September  30,  2017.  But,  from  my  review  of  a 
summary  of  bank  records  that  were  scheduled  by  an  FBI  forensic  accountant,  I  have  learned  that 
Cohen  had  over  $5,000,000  in  cash  and  cash  equivalents  as  of  September  30,  2017.  Specifically, 
from  my  review  of  the  account  schedule  and  bank  records,  I  have  learned  the  following: 

a.  Cohen  has  three  checking  and/or  savings  accounts  at  Capital  One  Bank,  one  of 
which  is  in  his  wife’s  name.  As  of  September  30,  2017,  Cohen  had  $1,105,680.35  m  his  savings 
account,  and  $1,262,982.29  in  total  in  the  three  accounts  at  Capital  One  Bank. 

b.  Cohen  has  three  accounts  at  Morgan  Stanley  in  his  name.  As  of  September  30, 
2017,  the  combined  total  in  cash  and  cash  equivalents  in  those  three  accounts  was  $1,270,600.41. 

c.  AsofSeptember30, 2017,  Cohen  had  $260,689. 18  in  an  account  at  Signature  Bank. 

d.  In  addition  to  the  Essential  Consultants  Account  and  MDC&A  Account  at  First 
Republic,  Cohen  also  had  two  joint  checking  accounts  with  Laura  Cohen  at  First  Republic.  In  total, 
as  of  September  30,  2017,  Cohen  had  at  least  $1,876,209.27  in  total  in  his  four  accounts  at  First 
Republic. 
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e.  Cohen  has  an  account  at  Bethpage  Credit  Union  with  $25,931.39  in  it  as  of 
September  30, 2017. 

f.  As  of  September  30, 2017,  Cohen  had  $17,542.54  in  accounts  at  Sterling. 

g.  Cohen  has  two  accounts  at  TD  Bank — one  in  his  name  and  one  held  jointly  with  his 
wife — and  the  total  balance  across  the  two  accounts  as  of  September  30,  2017  was  $300,096.72. 

h.  In  total,  as  of  September  30,201 7,  Cohen  had  at  least  $5,0 14,05 1 .80  in  his  accounts 
at  Capital  One  Bank,  Signature  Bank,  TD  Bank,  Bethpage  Credit  Union,  First  Republic,  and 
Morgan  Stanley. 

21 .  Accordingly,  based  on  the  foregoing,  it  appears  that  Cohen’s  representations  to  Sterling 
and  Melrose  that  he  did  not  have  more  than  $1,250,000  were  false,  and  that  Cohen  withheld 
information  regarding  approximately  $5  million  in  funds  from  Sterling  and  Melrose,  in  order  to 
secure  favorable  terms  in  his  renegotiation  of  his  medallion  loan.  Based  on  my  participation  in  an 
interview  with  Sterling  Employee-2,  and  my  review  of  reports  of  interviews  with  Sterling 
Employee-1  and  two  Melrose  employees,  it  is  my  understanding  that  that  Sterling  and  Melrose 
would  view  Cohen’s  understating  of  his  assets  as  material  to  its  decision  whether  to  renegotiate 
Cohen’s  medallion  loans  and  on  what  terms,  or  approve  of  the  transfer  of  those  loans  to 


Cohen  Had  a  Side  Agreement  With  1 


22.  As  set  forth  in  detail  below,  it  appears  that  during  the  course  of  Cohen’s  negotiations  to 


sell  his  interest  in  taxi  medallions  and  the  associated  debt  to 


Cohen  not  only 


misrepresented  his  financial  position  to  Sterling,  but  also  failed  to  disclose  a  side  deal  he  had 


negotiated  with 


|it  appears  that 


agreed  to  pay  an  above-market  price  for 


Cohen’s  taxi  cab  medallions,  and  in  exchange,  Cohen  agreed  to  pay 


approximately 
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$3.8  million  in  cash.  Specifically,  from  my  review  of  documents  produced  pursuant  to  a  subpoena 
by  Sterling,  and  reports  prepared  by  law  enforcement  officers  of  interviews  with  Sterling 
Employee-1,  as  well  as  my  participation  in  an  interview  with  Sterling  Employee-2, 1  have  learned, 
among  other  things,  the  following: 

a.  On  or  about  September  5,  2017,  an  executed  term  sheet  was  circulated  by  Sterling 
Employee-1  to  Cohen  andl^H^H  See  supra  T|  14(k).  According  to  the  term  sheet, 

would  borrow  $20,000,000  from  Sterling  and  Melrose,  to  be  secured  by  the  medallions 
that  ^^^^^^was  to  acquire  from  Cohen.  At  a  price  of  $20  million  for  thirty-two  taxi  medallions, 
the  proposed  transaction  valued  each  medallion  as  worth  $625,000.  The  term  sheet  also 
contemplated  a  $1,265,913  pay-down  of  the  principal  balance  of  the  loan.  The  term  sheet  made  no 
mention  of  a  $3.8  million  payment  from  Cohen  to  or  any  other  form  of  payment  or 

financial  transaction  between  the  parties. 

b.  Additionally,  an  internal  Sterling  credit  memorandum,  dated  October  4,  2017, 

describing  the  terms  of  the  Cohen-^^^^^^transaction  and  the  new  loan  tc^^^^^^^^^|did 
not  mention  any  payments  from  Cohen  to  including  a  $3.8  million  payment.  The 

memorandum  also  noted  that  the  “loan  amount  of  $20MM  indicates  a  $625M  purchase  price  per 
medallion”  but  “it  is  recognized  that  this  is  not  in  line  with  current  market  values.”  Indeed, 
according  to  an  internal  Sterling  memorandum  dated  February  5,  2018,  in  the  month  of  January 
20 1 8,  taxi  medallions  sold  for  amounts  ranging  from  $  120,000  to  $3 72,000.  According  to  Sterling 
Employee-1  and  Sterling  Employee-2,  they  were  never  told  that  |H|||||||||||||||  agreed  to  a  purchase 
price  of  $625,000  in  exchange  for  a  lump  sum  payment  from  Cohen,  or  that  Cohen  would  make 
any  payment  to 
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23.  While  Cohen  did  not  disclose  any  payment  from  Cohen  to 

communications  with  Sterling,  it  appears  that  such  a  payment  was  contemplated. 
Indeed,  based  on  my  review  of  records  maintained  by  Getzel,  and  a  report  prepared  by  law 
enforcement  agents  of  an  interview  with  Getzel,  I  have  learned  the  following,  in  substance  and  in 
part,  regarding  the  proposed  side-payment  from  Cohen 

a.  On  or  about  September  19,  2017,  Getzel  prepared  a  memorandum  for  Cohen 
entitled,  “Sale  of  NYC  Medallion  Entities  and  Debt  Assumption”  (the  “Getzel  Memorandum”). 
The  Getzel  Memorandum  summarized  the  proposed  transaction  between  Cohen  and 

in  part,  as  follows:  “Michael  and  Laura  Cohen  will  transfer  ownership  of  their  13  NYC  medallion 
entities  to  a  Buyer  who  will  assume  their  bank  indebtedness,  upon  the  [Cohens’]  paying  down  the 
debt  portfolio  of  the  13  entities  by  $500,000  and  a  cash  payment  to  the  Buyer  of  $3,800,000.”^^ 

b.  According  to  Getzel,  Cohen  told  him  the  parameters  of  the  deal,  including  the 

pa)mient  of  $3,800,000  but  Getzel  did  not  know  where  Cohen  was  going  to  obtain 

$3,800,000  to  pay  As  noted  above,  Cohen  had  more  than  $5,000,000  in  cash  and 

cash  equivalents  as  of  September  2017,  but  had  only  disclosed  in  his  September  2017  Financial 
Statement  that  he  had  $1.25  million  in  cash. 

24.  Based  on  my  review  of  records  maintained  by  Sterling  (as  well  as  Melrose,  the  bank 
with  the  participating  interest  in  the  loans)  and  reports  of  interviews  of  representatives  of  Sterling 
(and  Melrose),  I  have  seen  no  evidence  that  Sterling,  Melrose,  or  any  other  financial  institution 
involved  in  the  potential  deal  with  Cohen  and  ^^^^^|was  aware  of  the  planned  $3.8  million 
side  payment  from  Cohen  to 


The  reference  to  thirteen  medallions  appears  to  be  an  error  by  Getzel.  Cohen  and  his  wife 
together  owned  sixteen  corporations,  which  in  turn  owned  32  taxi  medallions. 
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D.  Probable  Cause  Regarding  the  Subject  Accounts 

25.  As  set  forth  above,  since  at  least  September  2015,  if  not  earlier,  Cohen  has  told  Sterling 
that  he  has  difficulty  making  payments  on  his  medallion  loans  and,  since  at  least  October  2016, 
Cohen  has  been  actively  engaged  in  an  attempt  to  sell  his  taxi  medallions  and  the  associated  debts 
In  the  course  of  doing  so,  Cohen  has  used  the  Cohen  Account  and/or  MDCPC 
Account  to  engage  in  email  communications  regarding  the  terms  of  the  transactions  and  the 
side-payment  at  the  Account, 

the  Accoimt,  and  at  the^^^Accoimt. 

as  described  above,  there  is  probable  cause  to  believe  that  the  Subject  Accounts  have  been  used 
regarding  the  proposed  Cohen-^^^^^|  transaction  with  Sterling: 

a.  Cohen  has  used  the  Cohen  Account  to,  among  other  things,  negotiate  a  pay-down 
of  the  principal  amount  of  the  loan,  see  supra  T|  14(g),  to  send  term  sheets  to  Sterling,  see  supra  If 
14(j),  to  communicate  with  his  accountant  about  the  contents  of  financial  statements,  see  supra  If 
16,  to  send  financial  statements  to  Sterling,  see  supra  14(i),  (1),  to  check  on  the  status  of  the 
transaction  as  of  January  24,  2018,  see  supra  T|  14(n),  to  negotiate  a  reduction  of  his  debt  with 

.  Sterling  on  or  around  January  31, 2018,  see  supra  T|  14(o),  to  tell  Sterling  on  February  1, 2018,  he 
does  not  have  the  ability  to  pay  more  than  $1 ,250,000,  see  supra  ^  14(p),  and  to  communicate  with 
individuals  responsible  for  sources  of  payments  to  the  Essential  Consultants  Account,  see  supra  If 
15.  In  other  words,  from  the  communications  described  above,  it  appears  likely  that  the  Cohen 
Account  will  contain  recent  evidence  of  the  Subject  Offenses,  including  communications  and 
potential  misrepresentations  to  Sterling,  and  evidence  indicating  that  statements  made  to  Sterling 
are  false  or  misleading. 

b.  the  ^^^^^^^^^|Account  to  communicate 

the  proposed  taxi  medallion  transaction  with  Cohen,  which  appears  to  have  been  discussed  as  early 
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as  October  2016.  See  supra  If  14(g).  Specifically,  as  described  above,  as  early  as  May  2, 2017, 
^^^^^^^^^|used  the  Account  to  inquire  about  the  status  of  the  transaction, 

see  supra  Tf  14(h).  He  used  the|||||||||||||||||^^  to  exchange  drafts  of  the  proposed  term 

sheet  with  Cohen,  UU  and  Sterling,  see  supra  Tf  14(j).  The  .^^^^^^^^^^Account  was  also 
used  by  send  a  personal  financial  statement  for||^^^^^^^^|to  Sterling, 

see  supra  ^  14(1).  The  ^^^^^^^^^^Account  was  copied  on  emails  from  the 
Account  about  the  transaction,  see  supra  ^  14(i),  and  was  listed  on  financial 

statement  as  the  contact  email  see  supra  ^  14(m).  Additionally,  based  on  my 

review  of  MDCPC  Header  Information,  I  know  that  on  or  about  September  1,  2017 — ^at  or  around 
the  time  the  Cohen  were  negotiating  a  term  sheet — the 

j^^^^l^^^HAccount  to  send  and  receive  eight  emails  from  Cohen  at  the  MDCPC  Account. 

c.  ^^|has  used  the  j^^Jkccount  to  communicate  with  Sterling  employees,  Cohen, 
and  .^^^^^^^^^^about  the  proposed  taxi  medallion  transaction  since  at  least  December  2016. 
See  supra  TfTf  14(g),  24(c).  Specifically,  on  or  about  August  29,  2017,|^^|told  Sterling  that  he 
should  be  included  on  “all  future  e-mails”  involving  the  proposed  transaction,  see  supra  Tf  14(j). 
Additionally,  ^^^|was  involved  in  making  revisions  to  the  parties’  term  sheets,  and  he  told 
Sterling  on  January  29, 2018  that^^^^^Jwould  not  go  forward  with  the  planned  transaction, 
see  supra  ^  14(j),  (n).  Accordingly,  there  is  probable  cause  to  believe  that  the^^jAccount  will 
contain  evidence  of  the  negotiations  between  Sterling  and  the  parties,  evidence  of  a  payment  from 
Cohen  to^^^^^^|ind  the  reasons  for  the  collapse  of  the  Cohen-^^^^^H  transaction. 


For  instance,  from  records  provided  by  Sterling,  I  know  that  on  or  about  December  2, 
2016,^^^^^^^^^|sent  an  email  to  a  Sterling  employee  using 

Account.  The  email  forwarded  correspondence  between^^^who  was  using  the^^^l 
Accoxmt,  and  an  employee  of  Capital  One  regarding  extending  loan  with 

Capital  One. 
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26.  Additionally,  it  appears  that  Cohen  set  up  the  MDCPC  Account  to  receive  emails  he 
was  previously  receiving  at  the  Cohen  Account.  Specifically,  based  on  my  review  of  records 
maintained  by  AT&T,  I  have  learned  that  on  or  about  May  5,  2017,  Cohen  sent  an  email  from  the 
MDCPC  Account  to  a  blind  copy  list  of  recipients  stating  that  “[d]ue  to  the  overwhelming  volume 
of  phone  calls  and  emails  coming  into  my  previous  cellular  number  and  e-mail  address,  I  have 
elected  to  create  for  Clients  Only  the  following.  Kindly  use  this  new  information  for  all  future 
contact  and  communications.”  The  signature  line  on  the  email  listed  “Essential  Consultants  LLC” 
and  “Michael  D.  Cohen  &  Associates,  PC,”  as  well  as  the  MDCPC  Account  as  the  email  address. 

27.  In  addition,  based  on  my  review  of  emails  from  the  MDCPC  Account  produced 
pursuant  to  the  Prior  Cohen  Account  Warrants  and  the  MDCPC  Header  Information,  I  have  learned 
that  Cohen  has  used  the  MDCPC  Account  to  send  and  receive  emails  from  the  Cohen  Account,  to 
communicate  with  th(^^^|\ccount,  and  to  send  and  receive  emails  from  other  email  accounts 
about  his  political  consulting  business.  Additionally,  from  my  review  of  the  MDCPC  Header 
Information,  it  appears  that  since  the  November  13, 2017  search  warrant  on  the  MDCPC  Account, 
Cohen  has  continued  to  send  and  receive  emails  at  the  MDCPC  Account  that  appear  likely  to  be 
relevant  to  the  commission  of  the  Subject  Offenses.  For  example,  emails  obtained  pursuant  to  the 
Prior  Cohen  Account  Warrants,  as  well  as  the  MDCPC  Header  Information  have  revealed  the 
following: 

a.  On  approximately  eight  occasions  in  August  and  September  2017,  while  Cohen, 
were  communicating  about  a  term  sheet  for  the  Cohen-"^^^^^Htaxi 


Based  on  my  review  of  emails  from  the  MDCPC  Account  obtained  pursuant  to  subpoena,  I 
have  learned  that  Cohen  has  used  the  account  to  communicate  with  numerous  individuals  with 
whom  he  does  not  enjoy  an  attorney-client  privilege,  including  some  of  the  individuals  described 
below.  See  infra  Tf  27. 
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medallion  transaction,  see  supra  If  14(k),  Cohen  used  the  MDCPC  Account  to  send  or  receive 
emails  from^^^it  the^^^|^ccount.  For  instance,  on  or  about  August  22,  2017,  ^^|used 
the  ^^^|\ccount  to  send  an  email  to  Sterling  Employee- 1  and  copied  Cohen  on  the  email  at  the 
MDCPC  Account.  On  the  same  day.  Sterling  Employee-1  responded  to^^fat  the^^Jkccount 
and  Cohen  at  the  MDCPC  Account.  On  or  about  August  22,  2017,  Cohen  also  used  the  MDCPC 
Account  to  send  an  email  to  Sterling  Employee-1. 

b.  As  noted  above,  on  or  about  September  1,  2017,  Cohen  used  the  MDCPC  Account 
to  send  or  receive  eight  emails  with  the  |^H||^||||||m  Account. 

c.  Cohen  used  the  MDCPC  Account  to  send  and  receive  emails  from  individuals  who 
work  at  companies  with  whom  it  appears  Cohen  has  a  political  consulting  agreement.  For 
example,  beginning  in  April  2017 — ^the  same  month  when  Cohen  began  receiving  payments  from 
AT&T,  see  supra  Iflf  16(d),  17(c) — Cohen  used  the  MDCPC  Account  to  send  and  receive  emails 
from  AT&T  employees.  These  emails  contain,  among  other  things,  invoices  from  Cohen  to  AT&T 
for  consulting  work  by  Cohen.  Similarly,  beginning  in  April  2017 — ^which  is  also  the  month 
Cohen  began  receiving  payments  from  Novartis  for  consulting  work,  see  supra  TfTf  16(d),  17(d) — 
Cohen  used  the  MDCPC  Account  to  send  and  receive  emails  from  employees  of  Novaifis.  These 
emails  concern,  among  other  things,  invoices  from  Cohen  and  requests  for  Novartis  for  Cohen’s 
assistance  on  an  initiative  relating  to  drug  pricing. 

d.  From  my  review  of  the  MDCPC  Header  Information,  I  have  learned  that  Cohen  has 
continued  to  use  the  MDCPC  Account  to  send  and  receive  emails  from  individuals  who  work  at 
companies  with  whom  it  appears  Cohen  had  a  political  consulting  agreement,  such  as  Novartis  and 
AT&T.  For  instance,  on  approximately  six  occasions  between  November  28,  2017  and  January 
30,  2018,  the  MDCPC  Account  was  used  to  send  and  receive  emails  from  accounts  belonging  to 
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individuals  using  @att.com  email  addresses.  Similarly,  on  approximately  seventeen  occasions 
between  December  1,  2017  and  February  20,  2018,  the  MDCPC  Account  was  used  to  send  and 
receive  emails  from  accounts  belonging  to  individuals  using  @novartis.com  email  addresses. 
Since  November  15, 2017,  the  MDCPC  Account  has  also  sent  and  received  emails  with  individuals 
using  the  email  domains  @bta.kz,  which  I  believe  is  the  email  domain  used  by  employees  of  BTA 
Bank,  see  supra  16(d),  17(b),  and  @squirepb.com,  which  I  believe  is  the  email  domain  used  by 
employees  of  the  law  firm  Squire  Patton  Boggs — ^both  of  which  Cohen  appears  to  have  a 
consulting  relationship  with,  see  supra  16(e),  17(e).  Accordingly,  it  appears  that  Cohen 
continues  to  use  the  MDCPC  Account  to  send  and  receive  emails  that  will  be  relevant  to  whether 
he  is  maintaining  a  consulting  business,  what  type  of  consulting  work  he  is  doing,  and  whether  he 
is  receiving  money  for  that  consulting  work. 

28.  In  addition  to  the  foregoing,  based  on  my  review  of  the  Pen  Register  Data,  see  supra 
9,  it  appears  that  since  the  date  of  the  last  search  warrant  on  the  Cohen  Account  (f.e.,  November 
13,  2017),  Cohen  has  continued  to  use  the  Cohen  Account  to  communicate  with  the 
^^^^^^l^ccount,  theJIHAccount,  and  other  email  accounts  that  appear  likely  to  be  relevant 
to  the  commission  of  the  Subject  Offenses  described  above.  For  example,  the  Pen  Register  Data 
has  revealed  the  following: 

a.  Emails  sent  by  the  Cohen  Account  to  the^^^JVccount  on  or  about  December  18, 

2017  at  8:26  p.m.,  December  21,  2017  at  9:35  p.m.,  December  22,  2017  at  4:32  p.m.,  Januaiy  3, 

2018  at  8:01  a.m.,  January  3, 2018  at  2:56  p.m.,  and  January  4,  2018  at  3:31  p.m. 

b.  An  email  sent  by  the  Cohen  Account  to  the  j^^^^^^^^^Account  on  or  about 
January  25,  2018  at  8:55  p.m. 
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on  or 


c.  Emails  from  the  Cohen  Account  to  the  email  account 
about  December  1,  2017  at  2:14  p.m.,  December  29,  2017  at  10:20  p.m.,  January  2,  2018  at  3:52 
p.m.,  January  2,  2018  at  5:44  p.m.,  and  January  8,  2018  at  6:38  p.m.  Based  upon  my  review  of 
emails  contained  in  the  Cohen  Account,  I  have  learned  that  the^^H^J^^^Hjlemail  account 
belongs  to  Jeffrey  Getzel,  Cohen’s  accountant,  through  whom  Cohen  made  misrepresentations  to 
financial  institutions,  as  discussed  above. 

d.  Emails  from  the  Cohen  Account  to  email  accounts  belonging  to  Sterling  employees, 
including  Sterling  Employee-1,  on  or  about  January  25,  2018  at  10:23  p.m.,  January  26,  2018  at 
12:55  a.m.,  January  29, 2018  at  5:30  p.m.,  January  29, 2018  at  8:29  p.m.,  January  30, 2018  at  6:44 


p.m. 

e.  An  email  sent  from  the  Cohen  Account  to  the  email  accoimt 
clientserviceny@firstrepublic.com  on  or  about  January  25,  2018  at  5:29  p.m.  As  stated  above. 
First  Republic  is  the  bank  at  which  the  Essential  Consultants  Account  is  held. 

f  Numerous  emails  sent  from  the  Cohen  Account  to  the  email  account 
including  emails  on  or  about  December  4, 2017  at  2: 17  p.m.  and  January  29, 
20 1 8  at  5 :43  p.m.  Based  upon  the  email  address  and  domain  name,  as  well  as  my  review  of  reports 
of  interviews  and  documents  reflecting  that  Cohen’s  taxi  medallions  were  leased  and  operated  by 

I  I  believe  that  the  email  address  belongs  to 


29.  Based  on  my  review  of  records  maintained  by  Sterling,  I  know  that  Cohen  used  the 
Cohen  Account  to  send  and  receive  documents  related  to  the  Cohen-^^^^^^|fransaction. 
Based  on  my  training  and  experience,  I  know  that  Google  allows  users  of  e-mail  accounts  to  easily 
save  documents  to  file  sharing  and  retention  platforms  such  as  Google  Docs  and  Google  Drive.  I 
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also  know,  from  my  training  and  experience,  that  users  of  e-mail  accounts  often  use  instant 
messaging  interfaces  linked  to  their  email  accounts.  Further,  I  have  learned  that  the  Providers 
maintain  records  of  search  and  web  histories  associated  with  email  accounts  and,  based  on  my 
training  and  experience,  users  of  e-mail  accounts  use  associated  web  search  browsers  associated 
with  a  subscriber’s  account  to  research  topics  they  are  e-mailing  about.  Accordingly,  there  is 
probable  cause  to  believe  that  content  information  associated  with  the  Subject  Accounts  will  also 
contain  evidence  related  to  the  Subject  Offenses. 

30.  Thus,  I  respectfully  submit  that  there  is  probable  cause  to  believe  that  emails  and  other 
content  information  from  the  Subject  Accounts  will  contain  evidence  of  Cohen’s  efforts  to  sell  his 
taxi  medallions  and  the  associated  debt,  and  his  misrepresentations  and  omissions  to  Sterling  and 
Melrose  in  connection  with  these  negotiations.  Although  Cohen  appears  to  have  communicated 
with  and  ^^^^primarily  through  the  Cohen  Account 

MDCPC  Account,  I  know,  based  on  my  involvement  in  the  investigation,  that  Cohen  also  used  at 
least  one  other  email  account  associated  with  his  position  at  the  Trump  Organization.  Thus,  I 
respectfully  submit  that  there  is  probable  cause  to  believe  that  emails  and  other  content  information 
from  the  Account,  Account  and  '^^^Account  since  on 

about  October  1,  2016 — ^the  approximate  date  of  when  Cohen’s  efforts  to  sell  his  taxi  medallions 
and  the  associated  debt  began — ^will  reflect  communications  with  the  Cohen  Account,  MDCPC 
Account,  and  possibly  one  or  more  additional  accounts  used  by  Cohen,  and  probable  cause  to 
believe  that  such  emails  will  constitute  evidence  of  Cohen’s  commission  of  the  Subject  Offenses, 
including  the  extent  to  which  Cohen  did  or  did  not  inform  other  individuals  involved  in  the  conduct 
described  above — such  his  misstatements  and 

omissions  to  financial  institutions. 
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^1  Tpmpnral  T.imitafinn.  This  application  seeks  all  emails  and  other  requested  content 
information  specified  in  Attachments  A,  B,  C,  and  D  for  the  following  periods: 

a.  For  the  Cohen  Account,  this  application  seeks  all  emails  sent,  created,  or  received 
between  November  14, 2017,  and  the  date  of  the  proposed  warrant,  inclusive.  As  described  above, 
pursuant  to  the  Prior  Cohen  Account  Warrants,  the  SCO  obtained  and  provided  to  the  USAO 
emails  from  the  Cohen  Account  that  were  sent,  created,  or  received  before  November  14,  2017. 
This  application  also  seeks  other  information  specified  above  associated  with  the  Cohen  Aeeount 
that  was  created  between  December  1,  2014  (the  month  when  Cohen  entered  into  the  medallion 
loans  with  Sterling),  and  the  date  of  the  proposed  warrant,  inclusive. 

b.  For  the  MDCPC  Account,  this  application  seeks  all  emails  sent,  created,  or  received 
between  November  14, 2017,  and  the  date  of  the  proposed  warrant,  inclusive.  As  described  above, 
pursuant  to  a  prior  warrant,  the  SCO  obtained  and  provided  to  the  USAO  emails  from  the  MDCPC 
Aeeount  that  were  sent,  created,  or  received  before  November  14,  2017. 

c.  For  the^^^^^^^^Account  and  .^^^^^^^^Account,  this  application 
seeks  emails  and  all  other  content  information  specified  above  sent,  created,  or  received  between 
Oetober  1,  2016,  and  the  date  of  the  proposed  warrant,  inclusive.  As  described  above,  Oetober 
2016  is  the  month  in  which  Cohen  began  negotiating  the  taxi  medallion  sale  with 

d.  For  the  Account,  this  application  seeks  emails  and  all  other  content 

information  specified  above  sent,  created,  or  received  between  December  1,  2016,  and  the  date  of 
the  proposed  warrant,  inclusive.  As  described  above,  December  2016  is  the  month  in  which^^^| 
began  representing  the^^^^^^^^^n  relation  to  the  taxi  medallion  transaction. 

E.  Evidence,  Fruits  and  Instrumentalities 

32.  Based  upon  the  foregoing,  I  respectfully  submit  there  is  probable  cause  to  believe  that 
information  stored  on  Google’s  servers  associated  with  the  Cohen  Account  will  contain  evidence, 
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fruits,  and  instrumentalities  of  violations  of  the  Subject  Offenses,  as  more  fully  described  in 
Section  II  of  Attachment  A  to  the  proposed  warrant  for  the  Cohen  Account  and  MDCPC  Account, 
including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  the  person(s)  who  created  or  used  the  Cohen  Account  or  MDCPC  Account. 

b.  Communications,  records,  documents,  and  other  files  involving  Sterling,  Melrose, 
and/or  taxi  medallions; 

c.  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or 
agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions, 
and  any  associated  debts  or  liabilities,  to  others,  including  to^^^^^^^^^|and/or  entities 
associated  with  him; 

d.  Communications,  records,  documents,  and  other  files  involving  Essential 
Consultants,  LLC  or  Michael  D.  Cohen  &  Associates,  including  those  which  indicate  the  nature 
and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  Michael  D.  Cohen  & 
Associates; 

e.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  —  who 
communicated  with  the  Cohen  Account  and/or  MDCPC  Account  about  any  matters  relating  to 
Essential  Consultants,  LLC,  or  about  any  plan  or  proposal  or  agreement  for  Cohen  and/or  entities 
associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to^^^^^^^^|and/or  entities  associated  with  him; 

f.  Communications  between  the  Cohen  Account  and/or  MDCPC  Account  and  Jeffrey 
Getzel  relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 
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g.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan 
at  that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution; 

h.  Evidence  indicating  how  and  when  the  Cohen  Account  and  MDCPC  Account  was 
accessed  or  used,  to  determine  the  geographic  and  chronological  context  of  account  access,  use, 
and  events  relating  to  the  crimes  under  investigation  and  to  the  account  owner;  and 

i.  Evidence  indicating  the  Cohen  Account  and  MDCPC  Account  owner’s  intent  as  it 
relates  to  the  Subject  Offenses  under  investigation. 

33.  Based  upon  the  foregoing,  I  further  submit  there  is  probable  cause  to  believe  that 
information  stored  on  Google’s  servers  associated  with  thE^^^^^^^^^^^fVccount  andj^^^J 
^^^^^H^ccount  will  contain  evidence,  fruits,  and  instrumentalities  of  violations  of  the  Subject 
Offenses,  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 

identity  of  the  person(s)  who  created  or  used  Account 

Account; 

b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal 
or  agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to|^^^^^^|and/or  entities  associated 
with  him; 

c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 
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communicated  with  the  Account  Account  about  any 

matters  relating  to  any  plan  or  proposal  or  agreement  for  Cohen  and/or  entities  associated  with  him 
to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or  liabilities,  to 
^^^^^^|md/or  entities  associated  with  him; 

d.  Communications  between  the  ^||||||||||||||||^^  Account  andm|^m||||||H 
Account  and  others,  including  employees  or  representatives  of  Sterling,  Melrose,  or  other  financial 
institution(s),  regarding  Cohen’s  finances; 

e.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan 
at  that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution; 

f.  Evidence  indicating  how  and  when  the  Account  and 

Account  were  accessed  or  used,  to  determine  the  geographic  and  chronological  context 

of  account  access,  use,  and  events  relating  to  the  crimes  under  investigation  and  to  the  account 
owner; 

g.  Evidence  indicating  Account  and  Account 

owners’  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

34.  Based  upon  the  foregoing,  I  further  submit  there  is  probable  cause  to  believe  that 
information  stored  on  Oath’s  servers  associated  with  the^^^l'Vccoimt  will  contain  evidence, 
fruits,  and  instrumentalities  of  violations  of  the  Subject  Offenses,  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  the  person(s)  who  created  or  used  the^^BAccount; 
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b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal 
or  agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  ^^^^^^^^^|and/or  entities  associated 
with  him; 

c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  any  person(s)  —  including  records  that  reveal  the  whereabouts  of  the  person(s)  —  who 
communicated  with  the  ^^^^|\.ccount  about  any  matters  relating  to  any  plan  or  proposal  or 
agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions, 
and  any  associated  debts  or  liabilities,  to  ^^^^^^^^|and/or  entities  associated  with  him; 

d.  Communications  between  the  ^^^J^ccount  and  others,  including  employees  or 
representatives  of  Sterling,  Melrose,  or  other  financial  institution(s),  regarding  Cohen’s  finances; 
and 

e.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution. 

ni.  Review  of  the  Information  Obtained  Pursuant  to  the  Warrant 

35.  Pursuant  to  18  U.S.C.  §  2703(g),  the  presence  of  a  law  enforcement  officer  is  not 
required  for  service  of  a  search  warrant  issued  under  §  2703,  or  for  the  collection  or  production  of 
responsive  records.  Accordingly,  the  warrant  requested  herein  will  be  transmitted  to  the  Providers, 
which  shall  be  directed  to  produce  a  digital  copy  of  any  responsive  records  to  law  enforcement 
personnel  within  30  days  from  the  date  of  service.  Law  enforcement  personnel  (including,  in 
addition  to  law  enforcement  officers  and  agents,  and  depending  on  the  nature  of  the  ESI  and  the 
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status  of  the  investigation  and  related  proceedings,  attorneys  for  the  government,  attorney  support 
staff,  agency  persoimel  assisting  the  government  in  this  investigation,  and  outside  technical  experts 
under  government  control)  will  retain  the  records  and  review  them  for  evidence,  fruits,  and 
instrumentalities  of  the  Subject  Offenses  as  specified  in  Section  III  of  Attachments  A,  B  and  C  to 
the  proposed  warrant. 

36.  In  conducting  this  review,  law  enforcement  personnel  may  use  various  methods  to 
locate  evidence,  fruits,  and  instrumentalities  of  the  Subject  Offenses,  including  but  not  limited  to 
undertaking  a  cursory  inspection  of  all  emails  within  the  Subject  Account.  This  method  is 
analogous  to  cursorily  inspecting  all  the  files  in  a  file  cabinet  in  an  office  to  determine  which  paper 
evidence  is  subject  to  seizure.  Although  law  enforcement  personnel  may  use  other  methods  as 
well,  particularly  mcluding  keyword  searches,  I  know  that  keyword  searches  and  similar  methods 
are  typically  inadequate  to  detect  all  information  subject  to  seizure.  As  an  initial  matter,  keyword 
searches  work  only  for  text  data,  yet  many  types  of  files  commonly  associated  with  emails, 
including  attachments  such  as  scanned  documents,  pictures,  and  videos,  do  not  store  data  as 
searchable  text.  Moreover,  even  as  to  text  data,  keyword  searches  cannot  be  relied  upon  to  capture 
all  relevant  communications  in  an  account,  as  it  is  impossible  to  know  in  advance  all  of  the  imique 
words  or  phrases  that  investigative  subjects  will  use  in  their  communications,  and  consequently 
there  are  often  many  communications  in  an  account  that  are  relevant  to  an  investigation  but  that 
do  not  contain  any  keywords  that  an  agent  is  likely  to  search  for. 

37.  Because  Cohen  and^^^|ire  attorneys,  the  review  of  the  content  within  the  Subject 
Accounts  will  be  conducted  pursuant  to  established  screening  procedures  to  ensure  that  the  law 
enforcement  personnel  involved  in  the  investigation,  including  attorneys  for  the  Government, 
collect  evidence  in  a  manner  reasonably  designed  to  protect  any  attorney-client  or  other  applicable 
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privilege.  When  appropriate,  the  procedures  will  include  use  of  a  designated  “filter  team,”  separate 
and  apart  from  the  investigative  team,  in  order  to  review  potentially  privileged  communications 
and  determine  which  communications  to  release  to  the  investigation  and  prosecution  team. 

IV.  Request  for  Non-Disclosure  and  Sealing  Order 

38.  The  existence  and  scope  of  this  ongoing  criminal  investigation  are  not  publicly  Imown. 
As  a  result,  premature  public  disclosure  of  this  affidavit  or  the  requested  warrants  could  alert 
Cohen  that  he  is  under  investigation,  causing  him  to  destroy  evidence,  flee  from  prosecution,  or 
otherwise  seriously  jeopardize  the  investigation.  M  particular,  based  on  my  experience 
investigating  white  collar  cases,  including  cases  featuring  documents  such  as  agreements,  drafts 
of  agreements,  notes  of  conversations,  and  other  documentary  evidence,  premature  disclosure  of 
an  investigation  may  cause  the  target  of  the  investigation  to  attempt  to  destroy  or  conceal  such 
evidence.  In  addition,  as  also  set  forth  above,  Cohen  uses  computers  and  electronic 
communications  in  furtherance  of  his  activity  and  thus  could  easily  delete,  encrypt,  or  otherwise 
conceal  such  digital  evidence  from  law  enforcement  were  he  to  learn  of  the  Government’s 
investigation.  See  18  U.S.C.  §  2705(b)(3).  Cohen  also  appears  to  have  the  financial  means  that 
would  facilitate  his  flight  from  prosecution.  See  18  U.S.C.  §  2705(b)(2),  (5). 

39.  Accordingly,  there  is  reason  to  believe  that,  were  the  Providers  to  notify  the  subscriber 
or  others  of  the  existence  of  the  warrant,  the  investigation  would  be  seriously  jeopardized. 
Pursuant  to  18  U.S.C.  §  2705(b),  I  therefore  respectfully  request  that  the  Court  direct  the  Providers 
not  to  notify  any  person  of  the  existence  of  the  warrant  for  a  period  of  180  days  from  issuance, 
subject  to  extension  upon  application  to  the  Court,  if  necessary. 

40.  For  similar  reasons,  I  respectfully  request  that  this  affidavit  and  all  papers  submitted 
herewith  be  maintained  under  seal  until  the  Court  orders  otherwise,  except  that  the  Government 
be  permitted  without  further  order  of  this  Court  to  provide  copies  of  the  warrant  and  affidavit  as 
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need  be  to  personnel  assisting  it  in  the  investigation  and  prosecution  of  this  matter,  and  to  disclose 
those  materials  as  necessary  to  comply  with  discovery  and  disclosure  obligations  in  any 
prosecutions  related  to  this  matter. 

V.  Conclusion 

41.  Based  on  the  foregoing,  I  respectfully  request  that  the  Court  issue  the  warrants  sought 
herein  pursuant  to  the  applicable  provisions  of  the  Stored  Communications  Act,  18  U.S.C. 
§  2703(b)(1)(A)  (for  contents)  and  §  2703(c)(1)(A)  (for  records  and  other  information),  and  the 
relevant  provisions  of  Federal  Rule  of  Criminal  Procedure  41. 


United  States  Attorney’s  Office 
Southern  District  of  New  York 


Sworn  to  before  me  this 


28th  day  of  February,  2018 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 
Associated  with  the  Email  Account 


maintained  at 


Rremises  Controlled  by  1  &  1  Internet, 
Inc.,  USAO  Reference  No. 
20I8R00I27 


Search  Warrant  and  Non-Disclosure  Order 

TO:  I  &  I  Internet,  Inc.  (“Provider”) 

United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  the  Federal 

Bureau  of  Investigation  (collectively,  the  “Investigative  Agencies”) 

1.  Warrant.  Upon  an  affidavit  of  Special  Agent  of  the  United  States 

Attorney’s  Office  for  the  Southern  District  of  New  York,  and  pursuant  to  the  provisions  of  the 
Stored  Communications  Act,  18  U.S.C.  §  2703(b)(1)(A)  and  §  2703(c)(1)(A),  and  the  relevant 
provisions  of  Federal  Rule  of  Criminal  Procedure  41,  the  Court  hereby  finds  there  is  probable 
cause  to  believe  the  email  account^^^^^^^^^^^^|maintamed  at  premises  controlled  by  1 
&  1  Internet,  Inc.,  contains  evidence,  fruits,  and  instrumentalities  of  crime,  all  as  specified  in 
Attachment  D  hereto.  Accordingly,  the  Provider  is  hereby  directed  to  provide  to  the  Investigative 
Agencies,  within  7  days  of  the  date  of  service  of  this  Warrant  and  Order,  the  records  specified  in 
Section  11  of  Attachment  D  hereto,  for  subsequent  review  by  law  enforcement  personnel  as 
authorized  in  Sections  III  and  IV  of  Attachment  D.  The  Government  is  required  to  serve  a  copy 
of  this  Warrant  and  Order  on  the  Provider  within  14  days  of  the  date  of  issuance.  The  Warrant 
and  Order  may  be  served  via  electronic  transmission  or  any  other  means  through  which  the 
Provider  is  capable  of  accepting  service. 
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2.  Non-Disclosure  Order.  Pursuant  to  18  U.S.C.  §  2705(b),  the  Court  finds  that  there  is 
reason  to  believe  that  notification  of  the  existence  of  this  warrant  will  result  in  destruction  of  or 
tampering  with  evidence  or  flight  from  prosecution,  or  otherwise  will  seriously  jeopardize  an 
ongoing  investigation.  Accordingly,  it  is  hereby  ordered  that  the  Provider  shall  not  disclose  the 
existence  of  this  Warrant  and  Order  to  the  listed  subscriber  or  to  any  other  person  for  a  period  of 
180  days  from  the  date  of  this  Order,  subject  to  extension  upon  application  to  the  Court  if 
necessary,  except  that  Provider  may  disclose  this  Warrant  and  Order  to  an  attorney  for  Provider 
for  the  purpose  of  receiving  legal  advice. 

3.  Sealing.  It  is  further  ordered  that  this  Warrant  and  Order,  and  the  Affidavit  upon  which 
it  was  issued,  be  filed  under  seal,  except  that  the  Government  may  without  further  order  of  this 
Court  serve  the  Warrant  and  Order  on  the  Provider;  provide  copies  of  the  Affidavit  or  Warrant  and 
Order  as  need  be  to  personnel  assisting  the  Government  in  the  investigation  and  proseeution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  diselosure 
obligations  in  any  prosecutions  related  to  this  matter. 

Dated:  New  York,  New  York 


'  I 


] 


Date  Issued 


Time  Issupi^ 


Chief  United  Stades  MagiSttateJudg^ 
Southern  District  of  iSfew  York 
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Email  Search  Attachment  D 

I.  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  1  &  1  Internet,  Inc.  (the  “Provider”),  headquartered  at  701  Lee 
Road,  Suite  300,  Chesterbrook,  Pennsylvania  19087,  and  applies  to  all  content  and  other 
information  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email  account 
[^the  “Subject  Account”)  for  the  time  period  between  November  14,  2017 
and  the  date  of  this  warrant,  inclusive. 

A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another 
appropriate  maimer  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  II  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  HI  below. 

II.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Account: 

a.  Email  content.  All  emails  sent  to  or  from,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Account,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email). 

b.  Address  book  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Account. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Account,  including  but  not  limited  to  name,  username,  address,  telephone 
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number,  alternate  email  addresses,  registration  IP  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  pa)nnent,  and  payment  history. 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Account, 
including  any  IP  logs  or  other  records  of  session  times  and  durations. 

e.  Customer  correspondence.  All  correspondence  with  the  subscriber  or  others  associated 
with  the  Subject  Account,  including  complaints,  inquiries,  or  other  contacts  with  support  services 
and  records  of  actions  taken. 

f.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preseiwation  request  issued  pursuant  to  18 
U.S.C.  §  2703(f)  or  otherwise. 

in.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 

agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
and  instrumentalities  of  violations  oflSU.S.C.  §§371  (conspiracy  to  commit  offense  or  to  defraud 
the  United  States),  1005  (false  bank  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (bank  fraud),  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Accoimt; 

b.  Communications,  records,  documents,  and  other  files  involving  Sterling  National 
Bank,  Melrose  Credit  Union,  and/ or  taxi  medallions ; 

c.  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 


02.28.2018 


2 


Case  l:18-cr-00602-WHP  Document  48-3  Filed  07/18/19  Page  51  of  67 


medallions,  and  any  associated  debts  or  liabilities,  to  others,  including  to 


entities  associated  with  him; 

d.  Communications,  records,  documents,  and  other  files  involving  Essential  Consultants, 
LLC  or  Michael  D.  Cohen  &  Associates,  including  those  which  indicate  the  nature  and  purpose  of 
payments  made  to  or  from  Essential  Consultants  or  Michael  D.  Cohen  &  Associates; 

e.  The  identity  of  any  person(s)  —  including  records  that  reveal  the  whereabouts  of  the 
person(s)  -  who  communicated  with  the  Subject  Account  about  any  matters  relating  to  Essential 
Consultants,  LLC,  or  about  any  plan  or  proposal  or  agreement  for  Michael  D.  Cohen  and/or  entities 
associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to^^^^^^^^|and/or  entities  associated  with  him; 

f.  Communications  between  the  Subject  Account  and  Jeffrey  Getzel  relating  to  Michael 
D.  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 

g.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  fluids  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 

h.  Evidence  indicating  how  and  when  the  Subject  Account  was  accessed  or  used,  to 
determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner;  and 

i.  Evidence  indicating  the  Subject  Account  owner’s  intent  as  it  relates  to  the  Subject 
Offenses  under  investigation. 
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IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 
Associated  with  the  Email  Accounts 
l@gmail.com, 
l^gmail.com,  and 

Maintained  at 
demises  (Jontrolled  by  Google,  Inc., 
USAO  Reference  No.  2018R00127 


Search  Warrant  and  Non-Disclosure  Order 

TO:  Google,  Inc.  (“Provider”) 

United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  the  Federal 

Bureau  of  Investigation  (collectively,  the  “Investigative  Agencies”) 

1.  Warrant  Upon  an  affidavit  of  Special  Agent  the  United  States 

Attorney’s  Office  for  the  Southern  District  of  New  York,  and  pursuant  to  the  provisions  of  the 
Stored  Communications  Act,  18  U.S.C.  §  2703(b)(1)(A)  and  §  2703(c)(1)(A),  and  the  relevant 
provisions  of  Federal  Rule  of  Criminal  Procedure  41,  the  Court  hereby  finds  there  is  probable 
cause  to  believe  the  email  accounts  ^^^^^^^^gmail.com,  ^^^|@gmail.com,  and 

maintained  at  premises  controlled  by  Google,  Inc.,  contain  evidence, 
fi-uits,  and  instrumentalities  of  crime,  all  as  specified  in  Attachments  A  and  B  hereto.  Accordingly, 
the  Provider  is  hereby  directed  to  provide  to  the  Investigative  Agencies,  within  7  days  of  the  date 
of  service  of  this  Warrant  and  Order,  the  records  specified  in  Section  II  of  Attachments  A  and  B 
hereto,  for  subsequent  review  by  law  enforcement  personnel  as  authorized  in  Sections  III  and  IV 
of  Attachments  A  and  B.  The  Government  is  required  to  serve  a  copy  of  this  Warrant  and  Order 
on  the  Provider  within  7  days  of  the  date  of  issuance.  The  Warrant  and  Order  may  be  served  via 
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electronic  transmission  or  any  other  means  through  which  the  Provider  is  capable  of  accepting 
service. 

2.  Non-Disclosure  Order.  Pursuant  to  18  U.S.C.  §  2705(b),  the  Court  finds  that  there  is 
reason  to  believe  that  notification  of  the  existence  of  this  warrant  will  result  in  destruction  of  or 
tampering  with  evidence  or  flight  from  prosecution,  or  otherwise  will  seriously  jeopardize  an 
ongoing  investigation.  Accordingly,  it  is  hereby  ordered  that  the  Provider  shall  not  disclose  the 
existence  of  this  Warrant  and  Order  to  the  listed  subscriber  or  to  any  other  person  for  a  period  of 
180  days  from  the  date  of  this  Order,  subject  to  extension  upon  application  to  the  Court  if 
necessary,  except  that  Provider  may  disclose  this  Warrant  and  Order  to  an  attorney  for  Provider 
for  the  purpose  of  receiving  legal  advice. 

3.  Sealing,  ft  is  further  ordered  that  this  Warrant  and  Order,  and  the  Affidavit  upon  which 
it  was  issued,  be  filed  under  seal,  except  that  the  Government  may  without  further  order  of  this 
Court  serve  the  Warrant  and  Order  on  the  Provider;  provide  copies  of  the  Affidavit  or  Warrant  and 
Order  as  need  be  to  personnel  assisting  the  Government  in  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure 
obligations  in  any  prosecutions  related  to  this  matter. 

Dated:  New  York,  New  York 


Date  Issued 


:iNORABLE  GABB3MrW:  GORENSTEIN 
Chief  United  State's 'Magistrate  Judge 
Southern  District  of  New  York 


I 
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Email  Search  Attachment  A 
L  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  Google,  Inc.  (the  “Provider”),  headquartered  at  1600 
Amphitheatre  Parkway,  Mountain  View,  California  94043,  and  applies  to  all  content  and  other 
information  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email  account 
@gmail.com  (the  “Subject  Account”)  for  the  time  period  referenced  below. 

A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another 
appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
ofiBcer  an  electronic  copy  of  the  information  specified  in  Section  II  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  III  below. 

IL  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Account: 

a.  Email  content.  All  emails  sent  to  or  from,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Account,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email) 
limited  to  items  sent,  received,  or  created  between  November  14, 20 1 7  and  the  date  of  this  warrant, 
inclusive. 

b.  Address  book  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Account. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Account,  including  but  not  limited  to  name,  username,  address,  telephone 


Case  l:18-cr-00602-WHP  Document  48-3  Filed  07/18/19  Page  56  of  67 


number,  alternate  email  addresses,  registration  IP  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  pa5mient  history. 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Account, 
including  any  IP  logs  or  other  records  of  session  times  and  durations,  limited  to  items  sent, 
received,  or  created  between  December  1,  2014  and  the  date  of  this  warrant,  inclusive. 

e.  Customer  correspondence.  All  coiTespondence  with  the  subscriber  or  others  associated 
with  the  Subject  Account,  including  complaints,  inquiries,  or  other  contacts  with  support  services 
and  records  of  actions  taken,  limited  to  items  sent,  received,  or  created  between  Deceimber  1, 2014 
and  the  date  of  this  warrant,  inclusive. 

f.  Search  History.  All  search  history  and/or  web  history  associated  with  the  Subject 
Account,  limited  to  items  sent,  received,  or  created  between  December  1, 2014  and  the  date  of  this 
warrant,  inclusive. 

g.  Associated  content.  All  Google  Docs,  files  maintained  on  Google  Drive,  and  instant 
messages  or  Gchats  associated  with  the  Subject  Account,  limited  to  items  sent,  received,  or  created 
between  December  1,  2014  and  the  date  of  this  warrant,  inclusive. 

h.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  18 
U.S.C.  §  2703(f)  or  otherwise. 

m.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
and  instrumentalities  of  violations  of  1 8  U.S.C.  §  §  371  (conspiracy  to  commit  offense  or  to  defraud 
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the  United  States),  1005  (false  bank  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (bank  fraud),  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Account; 

b.  Communications,  records,  documents,  and  other  files  involving  Sterling  National 
Bank,  Melrose  Credit  Union,  and/or  taxi  medallions; 

c.  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  others,  including  to  ^^^^^^^^^^and/or 
entities  associated  with  him; 

d.  Communications,  records,  documents,  and  other  files  involving  Essential  Consultants, 
T.T.C  or  Michael  D.  Cohen  &  Associates,  including  those  which  indicate  the  nature  and  purpose  of 
payments  made  to  or  from  Essential  Consultants  or  Michael  D.  Cohen  &  Associates; 

e.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  —  who 
communicated  with  the  Subject  Account  about  any  matters  relating  to  Essential  Consultants,  EEC, 
or  about  any  plaii  or  proposal  or  agreement  for  Michael  D.  Cohen  and/or  entities  associated  with 
him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or  liabilities,  to  others, 
including  to^^^^^^^^|and/or  entities  associated  with  him; 

f.  Communications  between  the  Subject  Account  and  Jeffrey  Getzel  relating  to  Michael 
D.  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 

g.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
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institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 

h.  Evidence  indicating  how  and  when  the  Subject  Account  was  accessed  or  used,  to 
determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner;  and 

i.  Evidence  indicating  the  Subject  Account  owner’s  intent  as  it  relates  to  the  Subject 
Offenses  under  investigation. 

IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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Email  Search  Attachment  B 
I.  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  Google,  Inc.  (the  “Provider”),  headquartered  at  1600 
Amphitheatre  Parkway,  Mountain  View,  California  94043,  and  applies  to  all  content  and  other 
information  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email 


accounts! 


^gmail.com  and  I 


|(the  “Subject  Accounts”)  for  the  time 


period  between  October  1,  2016  and  the  date  of  this  warrant,  inclusive. 

A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another 
appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  II  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  III  below, 
n.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Accounts: 

a.  Email  content.  All  emails  sent  to  or  from,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Accounts,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email). 

b.  Address  book  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Accounts. 


c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Accounts,  including  but  not  limited  to  name,  username,  address,  telephone 
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number,  alternate  email  addresses,  registration  ff  address,  account  creation  date,  accormt  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Accounts, 
including  any  IP  logs  or  other  records  of  session  times  and  durations. 

e.  Customer  correspondence.  All  correspondence  with  the  subscriber  or  others  associated 
with  the  Subject  Accounts,  including  complaints,  inquiries,  or  other  contacts  with  support  services 
and  records  of  actions  taken. 

f.  Search  History.  All  search  history  and/or  web  history  associated  with  the  Subject 
Accounts. 

g.  Associated  content.  All  Google  Docs,  files  maintained  on  Google  Drive,  'and  instant 
messages  or  Gchats  associated  with  the  Subject  Accounts. 

h.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  18 
U.S.C.  §  2703(Q  or  otherwise. 

ni.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
and  instrumentalities  of  violations  of  1 8  U.S.C.  §  §  37 1  (conspiracy  to  commit  offense  or  to  defraud 
the  United  States),  1005  (false  bank  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (banlc  fraud),  including  the  following; 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Accounts; 
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b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to^^^^^^^^^^^nd/or  entities  associated 
with  him; 

c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  any  person(s)  —  including  records  that  reveal  the  whereabouts  of  the  person(s)  —  who 
communicated  with  the  Subject  Accounts  about  any  matters  relating  to  any  plan  or  proposal  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to^^^^^^^^^|nd/or  entities  associated 
with  him; 

d.  Communications  between  the  Subject  Accounts  and  others,  including  employees  or 
representatives  of  Sterling  National  Bank,  Melrose  Credit  Union,  or  other  financial  institution(s), 
regarding  Michael  D.  Cohen’s  finances; 

e.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  accoxmt  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  accoxmt  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 

f.  Evidence  indicating  how  and  when  the  Subject  Accounts  was  accessed  or  used,  to 
determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner; 

g.  Evidence  indicating  the  Subject  Accounts  owners’  intent  as  it  relates  to  the  Subject 
Offenses  under  investigation. 
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IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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t) 


UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 


As|neiated  with  the  Email  Account 
^^H^aol.com,  Maintained  at 
Premises  Controlled  hy  Oath,  Inc., 
USAO  Reference  No.  201 8R00127 


Search  Warrant  and  Non-Disclosure  Order 

TO:  Oath,  Inc.  (“Provider”) 

United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  the  Federal 

Bureau  of  Investigation  (collectively,  the  “Investigative  Agencies”) 

1.  Warrant.  Upon  an  affidavit  of  Special  Agent  of  the  United  States 

Attorney’s  Office  for  the  Southern  District  of  New  York,  and  pursuant  to  the  provisions  of  the 
Stored  Communications  Act,  18  U.S.C.  §  2703(b)(1)(A)  and  §  2703(c)(1)(A),  and  the  relevant 
provisions  of  Federal  Rule  of  Criminal  Procedure  41,  the  Court  hereby  finds  there  is  probable 
cause  to  believe  the  email  account^^^|^aol.com,  maintained  at  premises  controlled  by  Oath, 
Inc.,  contains  evidence,  fruits,  and  instrumentalities  of  crime,  all  as  specified  in  Attachment  C 
hereto.  Accordingly,  the  Provider  is  hereby  directed  to  provide  to  the  Investigative  Agencies, 
within  7  days  of  the  date  of  service  of  this  Warrant  and  Order,  the  records  specified  in  Section  11 
of  Attachment  C  hereto,  for  subsequent  review  by  law  enforcement  personnel  as  authorized  in 
Sections  HI  and  IV  of  Attachment  C.  The  Government  is  required  to  serve  a  copy  of  this  Warrant 
and  Order  on  the  Provider  within  14  days  of  the  date  of  issuance.  The  Warrant  and  Order  may  be 
served  via  electronic  transmission  or  any  other  means  through  which  the  Provider  is  capable  of 
accepting  service. 
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2.  Non-Disclosure  Order.  Pursuant  to  18  U.S.C.  §  2705(b),  the  Court  finds  that  there  is 
reason  to  believe  that  notification  of  the  existence  of  this  warrant  will  result  in  destruction  of  or 
tampering  with  evidence  or  flight  from  prosecution,  or  otherwise  will  seriously  jeopardize  an 
ongoing  investigation.  Accordingly,  it  is  hereby  ordered  that  the  Provider  shall  not  disclose  the 
existence  of  this  Warrant  and  Order  to  the  listed  subscriber  or  to  any  other  person  for  a  period  of 
180  days  from  the  date  of  this  Order,  subject  to  extension  upon  application  to  the  Court  if 
necessary,  except  that  Provider  may  disclose  this  Warrant  and  Order  to  an  attorney  for  Provider 
for  the  purpose  of  receiving  legal  advice. 

3.  Sealing.  It  is  further  ordered  that  this  Warrant  and  Order,  and  the  Affidavit  upon  which 
it  was  issued,  be  filed  under  seal,  except  that  the  Government  may  without  fiirther  order  of  this 
Court  serve  the  Warrant  and  Order  on  the  Provider;  provide  copies  of  the  Affidavit  or  Warrant  and 
Order  as  need  be  to  personnel  assisting  the  Government  in  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosm*e 
obligations  in  any  prosecutions  related  to  this  matter. 

Dated:  New  York,  New  York  , ,  i  s )  >  n  i , , 


■Oiief  fJnifed  States  Magistrate  Judge 
Southern  District  dfl^ew  York 


02.28.2018 


2 


Case  l:18-cr-00602-WHP  Document  48-3  Filed  07/18/19  Page  65  of  67 


Email  Search  Attachment  C 

I.  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  Oath,  Inc.  (the  “Provider”),  headquartered  at  22000  AOL  Way, 
Dulles,  Virginia  20166,  and  applies  to  all  content  and  other  information  within  the  Provider’s 
possession,  custody,  or  control  associated  with  the  email  account^^^|@aol.com  (the  “Subject 
Account”)  for  the  time  period  between  December  1,  2016  and  the  date  of  this  warrant,  inclusive. 

A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another 
appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  infonnation  specified  in  Section  II  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  III  below. 

II.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’ s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Account: 

a.  Email  content.  All  emails  sent  to  or  from,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Account,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email). 

b.  Address  book  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Accormt. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Account,  including  but  not  limited  to  name,  username,  address,  telephone 
number,  alternate  email  addresses,  registration  IP  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 
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d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Account, 
including  any  IP  logs  or  other  records  of  session  times  and  durations. 

e.  Customer  correspondence.  All  correspondence  with  the  subscriber  or  others  associated 
with  the  Subject  Account,  including  complaints,  inquiries,  or  other  contacts  with  support  services 
and  records  of  actions  taken. 

f.  Search  History.  All  search  history  and/or  web  history. 

g.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories,  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  18 
U.S.C.  §  2703(f)  or  otherwise. 

in.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
and  instrumentalities  of  violations  of  18  U.S.C.  §§  371  (conspiracy  to  commit  offense  or  to  defraud 
the  United  States),  1005  (false  bank  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (bank  fraud),  including  the  following; 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Account; 

b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  tc^^^^^^^^^^^and/or  entities  associated 
with  him; 
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c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 
communicated  with  the  Subject  Account  about  any  matters  relating  to  any  plan  or  proposal  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to^^^^^^^^^|and/or  entities  associated 
with  him; 

d.  Communications  between  the  Subject  Account  and  others,  including  employees  or 
representatives  of  Sterling  National  Bank,  Melrose  Credit  Union,  or  other  financial  institution(s), 
regarding  Michael  D.  Cohen’s  finances;  and 

e.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution. 

IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 


02,28.2018 
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AO  106  (Rev.  06/09)  Application  for  a  Search  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of  ^ 

(Briefly  describe  the  property  to  be  searched  ) 

or  identify  the  person  by  name  and  address)  ^ 

A  Device  Containing  the  Results  of  Three  Email  ) 

Search  Warrants,  See  Attachment  A  ) 

APPLICATION  FOR  A  SEARCH  WARRANT 

I,  a  federal  law  enforcement  officer  or  an  attorney  for  the  government,  request  a  search  warrant  and  state  under 
penalty  of  perjuiy  that  I  have  reason  to  believe  that  on  the  following  person  or  property  (identify  the  person  or  describe  the 

~X-l5^^fea^dQn^a1nfn^g-f[fe^rk^esultsroi^hree^Emailr^Search-Warrants7::See--AttaGhmentrA--^^  . 


located  in  the  _ Southern _  District  of _ New  York _ ,  there  is  now  concealed  (identify  the 

person  or  describe  the  property  to  be  seized)'. 

PLEASE  SEE  ATTACHED  AFFIDAVIT  AND  RIDER. 


The  basis  for  the  search  under  Fed.  R,  Grim.  P.  41(c)  is  (check  one  or  more): 
sT  evidence  of  a  crime; 

□  contraband,  fruits  of  crime,  or  other  items  illegally  possessed; 

□  property  designed  for  use,  intended  for  use,  or  used  in  committing  a  crime; 

□  a  person  to  be  arrested  or  a  person  who  is  unlawfully  restrained. 


The  search  is  related  to  a  violation  of: 

Code  Section  Offense  Description 

18  use  371,  1005,  1014,  Conspiracy  to  defraud  the  United  States;  false  bank  entries;  false  statements  to  a 

1343,  1344  financial  institution;  wire  fraud;  bank  fraud 


The  application  is  based  on  these  facts: 

PLEASE  SEE  ATTACHED  AFFIDAVIT  AND  RIDER. 

sf  Continued  on  the  attached  sheet. 

S?f  Delayed  notice  of  30  days  (give  exact  ending  date  if  more  than  30  days:  _ 
under  18  U.S.C.  §  3 103a,  the  basis  of  which  is  set  forth  on  the  attached  sheet. 


)  is  requested 


Sworn  to  before  me  and  signed  in  my  presence. 


Date 


City  and  state; 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  the  Application  of  the  United 
States  Of  America  for  a  Search  Warrant  for  A 
Device  Containing  the  Results  of  Three  Email 
Search  Warrants,  USAO  Reference  No 
2018R00127 


Agent  Affidavit  in  Support  of 
Application  for  a  Search  Warrant 


TO  BE  FILED  UNDER  SEAL 


SOUTHERN  DISTRICT  OF  NEW  YORK)  ss.: 


Special  Agent 


of  the  United  States  Attorney’s  Office  for  the  Southern 


District  of  New  York,  being  duly  sworn,  deposes  and  says: 


I.  Introduction 


A.  Affiant 


1.  I  am  a  Special  Agent  with  the  United  States  Attorney’s  Office  for  the  Southern 
District  of  New  York  (the  “USAO”).  I  have  been  a  Special  Agent  with  the  USAO  since  August 
2016.  I  previously  served  as  a  Special  Agent  with  the  United  States  Department  of  Labor  Inspector 
General  from  May  2011  to  August  2016.  In  the  course  of  my  experience  and  traming  in  these 
positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a  wide  array 
of  financial  crimes,  including  frauds  on  financial  institutions.  I  also  have  training  and  experience 
executing  search  warrants,  including  those  authorizing  the  search  of  email  accounts. 

2.  I  make  this  Affidavit  in  support  of  an  application  pursuant  to  Rule  41  of  the  Federal 
Rules  of  Criminal  Procedure  for  a  warrant  to  search  the  electronic  device  specified  below  (the 
“Subject  Device”)  for  the  items  and  information  described  in  Attachment  A.  This  affidavit  is  based 
upon  my  personal  knowledge;  my  review  of  documents  and  other  evidence;  my  conversations  with 
other  law  enforcement  personnel;  and  my  training,  experience  and  advice  received  concerning  the 
use  of  computers  in  criminal  activity  and  the  forensic  analysis  of  electronically  stored  information 
(“ESI”).  Because  this  affidavit  is  being  submitted  for  the  limited  purpose  of  estabUshing  probable 
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cause,  it  does  not  include  all  the  facts  that  I  have  learned  during  the  eourse  of  my  investigation. 
Where  the  eontents  of  doeuments  and  the  actions,  statements,  and  eonversations  of  others  are 
reported  herein,  they  are  reported  in  substance  and  in  part,  except  where  otherwise  indieated. 

B.  Prior  Warrants  and  the  Subject  Device 

3.  As  set  forth  in  detail  below,  the  US  AO  and  the  Federal  Bureau  of  Investigation 
(“FBF’)  are  investigating,  among  other  things,  a  scheme  by  Miehael  Cohen  to  defraud  multiple 
banks.  Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President 
Donald  Trump,  and  who  previously  served  for  over  a  decade  as  an  exeeutive  in  the  Trump 
Organization,  an  mtemational  conglomerate  with  real  estate  and  other  holdings. 

4.  In  eonnection  with  an  investigation  then  being  conducted  by  the  Offiee  of  the 
Speeial  Counsel  (“SCO”),  the  FBI  sought  and  obtained  from  the  Honorable  Beryl  A.  Howell,  Chief 
United  States  District  Judge  for  the  District  of  Columbia,  three  search  warrants  (collectively,  the 
“SCO  Warrants”)  for  emails  and  other  content  information  associated  with  two  email  aeeounts 
used  by  Cohen.  Specifically: 


On  or  about  July  1 8, 2017,  the  FBI  sought  and  obtained  a  seareh  warrant  for 


a. 


emails  in  the  aeeount 


fegmail.com  (the  “Cohen  Gmail  Aeeount”)  sent  or  reeeived 


between  January  1,  2016  and  July  18,  2017.  This  warrant,  which  is  numbered  17-mj-00503,  is 
attaehed  as  Exhibit  A  (the  “First  Cohen  Gmail  Warrant”). 


b.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  seareh 


warrant  for  emails  in  the  Cohen  Gmail  Account  sent  or  received  between  June  1,  2015  and 


November  13, 2017.  This  warrant,  which  is  numbered  17-mj-00855,  is  attaehed  as  Exhibit  B  (the 
“Seeond  Cohen  Gmail  Warrant”). 


c. 


On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  search 


warrant  for  emails  in  the  account 


|the  “Cohen  MDCPC  Account”)  sent  or 
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received  between  the  opening  of  the  Cohen  MDCPC  Account’^  and  November  13,  2017.  This 
warrant,  which  is  numbered  17-mj-00854,  is  attached  as  Exhibit  C  (the  “Cohen  MDCPC 
Warrant”). 

5.  The  SCO  has  since  referred  certain  aspects  of  its  investigation  into  Cohen  to  the 
USAO,  which  is  working  with  the  FBTs  New  York  Field  Office.  As  part  of  that  referral,  on  or 
about  February  8,  2018,  the  SCO  provided  the  USAO  with  all  non-privileged  emails  and  other 
content  information  obtained  pursuant  to  the  SCO  Warrants.  A  filter  team  working  with  the  SCO 
had  previously  reviewed  the  e-mails  produced  pursuant  to  the  SCO  Warrants  for  privilege. 

6.  These  emails  are  contained  on  the  Subject  Device,  which  is  particularly  described 
as  a  black  and  red  USB  drive  with  a  white  label  that  says  “Tracking  #:  180208140208.”  That  is, 
the  Subject  Device  contains  the  emails  and  other  content  information  obtained  pursuant  to  the  SCO 
Warrants,  less  any  emails  that  were  screened  and  removed  by  the  SCO’s  privilege  team. 

7.  The  Subject  Device  is  presently  located  in  the  Southern  District  of  New  York. 

C.  The  Subject  Offenses 

8.  The  affidavits  in  support  of  the  SCO  Warrants  describe  evidence  of  several 
different  courses  of  conduct  by  Cohen,  including,  among  other  things,  false  statements  to  financial 
institutions  relating  to  the  purpose  of  an  account  he  opened  in  the  name  of  Essential  Consultants 
LLC  and  the  nature  of  funds  flowing  into  that  account,  and  activities  undertaken  by  Cohen  on 
behalf  of  certain  foreign  persons  or  foreign  entities  without  having  registered  as  a  foreign  agent. 
The  SCO  Warrants  accordingly  define  the  evidence  to  be  seized  by  reference  to  subject  offenses 

^  Based  on  my  review  of  this  warrant  and  the  affidavit  in  support  of  it,  I  know  that  the  warrant  did 
not  specify  a  time  period,  but  the  affidavit  indicated  that,  pursuant  to  court  order,  the  service 
provider  had  provided  non-content  information  for  the  Cohen  MDCPC  Account  that  indicated  that 
the  account  contained  emails  firom  the  approximate  period  of  March  2017  through  the  date  of  the 
warrant. 
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and  specific  categories  of  information  related  to  these  courses  of  conduct.  The  subject  offenses  in 
the  SCO  Warrants  are  summarized  as  follows: 


Exhibit 

Warrant 

Subject  Offenses  in  Prior  Warrant 

A 

First  Cohen  Gmail 
Warrant 

18  U.S.C.  §§  1014  (false  statement  to  financial  institution),  1956  (money 
laundering),  95 1  (acting  as  an  unregistered  foreign  agent),  and  22  U.S.C. 
§§611  etseq.  (Foreign  Agents  Registration  Act  f  TARA’’)) 

B 

Second  Cohen  Gmail 
Warrant 

18  U.S.C.  §§  1014  (false  statement  to  financial  institution),  1343  (wire 
fraud),  1344  (bank  fraud),  1956  (money  laundering),  951  (acting  as  an 
unregistered  foreign  agent),  and 22  U.S.C.  §§611  etseq,  (FARA) 

c 

Cohen  MDCPC  Warrant 

18  U.S.C.  §§  1014  (false  statement  to  financial  institution),  1343  (wire 
fraud),  1344  (banlc  fraud),  1956  (money  laundering),  951  (acting  as  an 
um^egistered  foreign  agent),  and  22  U.S.C.  §§611  etseq.  (FARA) 

9.  Based  on  my  participation  in  this  investigation,  including  my  review  of  documents 
obtained  pursuant  to  subpoena  and  court  order,  my  conversations  with  witnesses  and  review  of 
reports  of  conversations  with  witnesses,  and  my  review  of  publicly  available  information,  I  have 
learned  of  additional  conduct  by  Cohen,  described  below,  which  was  not  described  in  the  affidavit 
seeking  the  First  Cohen  Gmail  Warrant  and  was  described  briefly  in  the  affidavits  seeking  the 
Second  Cohen  Gmail  Warrant  and  the  Cohen  MDCPC  Warrant.^ 

10.  I  am  therefore  requesting  authority  to  expand  the  search  of  the  non-privileged  e- 
mads  obtained  pursuant  to  the  SCO  Warrants,  as  contained  on  the  Subject  Device,  for  evidence 
related  to  this  additional  conduct.  As  set  forth  below,  in  addition  to  the  categories  of  evidence 
already  described  in  the  SCO  Warrants,  there  is  probable  cause  to  believe  that  the  Subject  Device 
contains  evidence  of  violations  of  1 8  U.S.C.  §  371  (conspiracy  to  defraud  the  United  States),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fraud)  (collectively,  the  “Subject  Offenses”),  related  to  the  additional  conduct  described 
below.^ 

^  I  do  not  base  this  application  on  my  review  of  emails  obtained  pursuant  to  the  SCO  Warrants. 

^  The  SCO  Warrants  cite  many  of  the  same  statutes  as  subject  offenses  and  describe  categories  of 
information  that  likely  encompass  evidence  of  the  additional  conduct  described  herein. 
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II.  Probable  Cause  Regarding  the  Subject  Offenses 

1 1 .  Together  with  this  application,  I  am  submitting  an  application  for  a  search 
warrant,  pursuant  to  18  U.S.C.  §  2703,  for  all  content  and  other  information  associated  with  (a) 
the  Cohen  Gmail  Account,  for  the  time  period  November  14,  2017  to  the  present;  (b)  the  Cohen 
MDCPC  Account,  for  the  time  period  November  14,  2017  to  the  present;  and  (c)  three  other 
email  accounts.  The  affidavit  in  support  of  this  application  is  attached  as  Exhibit  D  (the 
“Accompanying  Affidavit”),  and  is  incorporated  by  reference  as  if  fully  set  forth  herein. 

12.  As  set  forth  in  the  Accompanying  Affidavit,  there  is  probable  cause  to  believe  that 

Cohen  has  made  affirmative  misrepresentations  in  and  omitted  material  information  from  financial 
statements  and  other  disclosures  that  Cohen  provided  to  multiple  banks  in  connection  with  a 
transaction  intended  to  relieve  Cohen  of  approximately  $22  million  in  debt  he  owed  on  taxi 
medallion  loans  from  the  banks.  As  set  forth  in  detail  in  the  Accompanying  Affidavit,  in  these 
financial  statements,  and  in  his  oral  and  other  written  statements  to  these  banks,  Cohen  appears  to 
have  (i)  intentionally  omitted  cash  assets  that  he  began  receiving  in  2017  from  new  consulting 
work;  (ii)  significantly  understated  his  total  holdings  of  cash  and  cash  equivalents;  and  (iii)  failed 
to  inform  the  banks  from  which  he  was  seeking  debt  relief  that  he  had  agreed  to  make  a  $3.8 
million  cash  payment  to  a  third  party,  in  connection  with 

acquisition  of  the  taxi  medallions  securing  Cohen’s  debt.  By  making  these  misrepresentations  and 
material  omissions,  Cohen  avoided  making  monthly  payments  on  his  loans,  and  attempted  to  and 
has  secured  proposed  agreements  from  the  banks  to  relieve  him  of  certain  repayment  obhgations 
worth  millions  of  dollars. 


Nevertheless,  in  an  abundance  of  caution,  I  am  seeking  explicit  authorization  to  search  the  Subject 
Device  for  evidence  of  this  additional  conduct. 
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13.  As  noted  above,  the  Accompanying  Affidavit  seeks  email  content  for  the  Cohen 
Gmail  Account  and  the  Cohen  MDCPC  Account  for  the  period  from  November  14,  2017  to  the 
present,  and  therefore  establishes  probable  cause  that  a  search  of  the  email  content  from  that  time 
period  will  reveal  evidence,  fruits,  and  instrumentalities  of  the  Subject  Offenses.  As  set  forth 
below,  the  Accompanying  Affidavit  also  establishes  probable  cause  to  believe  that  a  search  of 
the  Subject  Device  {i.e.,  the  non-privileged  emails  from  the  earlier  time  periods  covered  by  the 
SCO  Warrants)  will  similarly  reveal  evidence,  fruits,  and  instrumentalities  of  the  Subject 
Offenses."^  For  example,  as  described  in  the  Accompanying  Affidavit: 

a.  In  or  about  December  2014,  Sterling  National  Bank  (“Sterling”)  agreed  to 
lend  approximately  $22  million  to  Cohen’s  medallion  companies.  See  Accompanying  Affidavit 
1 14(c). 


b.  In  or  about  September  2015,  Cohen  began  pushing  Sterling  for  a  reduction 
in  his  monthly  payments.  See  id  f  14(e). 

c.  In  or  about  October  20 1 6,  Cohen  told  a  Sterling  employee  (“Sterling 

I  who 


Employee- 1”)  that  he  had  a  potential  buyer  of  his  taxi  medallions,  namedi 
would  agree  to  assume  Cohen’s  debt  with  Sterlmg  (and  Melrose  Credit  Union,  the  participating 
bank).  See  id.  f  14(g).  Negotiations  of  the  potential  taxi  medallion  transaction  then  followed  for 
more  than  a  year.  See  id.  TITj  14(g)-(q). 


^  As  noted,  the  Subject  Device  contains  email  content  for  the  Cohen  Gmail  Accoimt  from  the 
period  of  June  1, 2015  to  November  13,  2017,  and  email  content  for  the  Cohen  MDCPC  Account 
for  the  period  of  March  2017  to  November  13,  2017. 
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d.  On  or  about  February  22,  2017,  the  Cohen  Gmail  Account^  sent  an  email  to 
a  Sterling  employee  (“Sterling  Employee-2”)  stating  that  he  “agreed  to  pay  down  1  million  from 
the  loan  amount.”  See  id.  ^  14(g). 

e.  On  or  about  June  8,  2017,  Cohen  emailed  Sterling  Employee-1  from  the 
Cohen  Gmail  Account,  attaching  a  Sterling  personal  financial  statement  form  that  had  been  filled 
out  by  hand,  which  referenced  a  statement  of  financial  condition,  dated  May  1, 2017  (the  “May 
2017  Financial  Statement”),  that  was  also  attached.  See  id.  14(i). 

f.  On  or  about  October  5,  2017,  Cohen,  using  the  Cohen  Gmail  Account,  re¬ 
sent  Sterling  Employee-2  a  copy  of  his  May  2017  Financial  Statement.  A  day  later,  on  October  6, 
2017,  Cohen,  using  the  Cohen  Gmail  Account,  emailed  Sterling  Employee-2  a  statement  of 
financial  condition,  dated  September  30,  2017  (the  “September  2017  Financial  Statement”).  See 
id.  Tf  14(m).  The  September  2017  Financial  Statement  omitted  assets  that  Cohen  held  in  certain 
bank  accounts  and  substantially  understated  his  available  cash  and  cash  equivalents.  See  id.  TfTf 
19-20. 

g.  It  appears  that  Cohen  set  up  the  Cohen  MDCPC  Account  to  receive  emails 
he  was  previously  receiving  at  the  Cohen  Gmail  Account.  On  or  about  May  5, 2017,  Cohen  sent 
an  email  from  the  Cohen  MDCPC  Account  to  a  bhnd  copy  list  of  recipients,  stating  that  “[d]ue  to 
the  overwhelming  volume  of  phone  calls  and  emails  coming  iato  my  previous  cellular  number 
and  e-mail  address,  I  have  elected  to  create  for  Clients  Only  the  following.  Kdndly  use  this  new 


®  As  noted  in  n.2,  supra,  I  do  not  base  this  application  on  my  review  of  emails  obtained  pursuant 
to  the  SCO  Warrants.  Where  the  content  of  emails  sent  from  or  received  by  the  Cohen  Gmail 
Account  and/or  the  Cohen  MDPC  Account  are  described  herein,  my  description  is  based  on  copies 
of  these  emails  produced  by  third  parties  pursuant  to  subpoena  or  otherwise. 
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information  for  all  future  contact  and  communications.”  The  signature  line  on  the  email  listed 
the  Cohen  MDCPC  Account  as  the  new  email  address.  See  id.  ^  26. 

h.  Based  on  my  review  of  header  information  obtained  by  court  order,  I  have 

learned  that,  on  approximately  eight  occasions  in  August  and  September  2017,  while  Cohen, 
mu  and  and  ^^^^^^|were  communicating  about  a  term  sheet  for  the 

Cohen-’^^^^Jtaxi  medallion  transaction,  the  Cohen  MDCPC  Account  sent  or  received 
emails  from  including  emails  on  which  Sterling  employees  were  copied.  On  or  about 
August  22,  2017,  Cohen  also  used  the  Cohen  MDCPC  Account  to  send  an  email  to  Sterling 
Employee-1.  See  id.  ^  27(a). 

i.  Based  on  my  review  of  header  information  obtained  by  court  order,  I  have 

learned  that  on  or  about  September  1,  2017 — at  or  around  the  time  the  Cohen 

were  negotiating  a  term  sheet: — ^the  Cohen  MDCPC  Account  sent  or  received  eight  emails  to  or 

See  id.  ^  25(b). 

14.  Therefore,  there  is  probable  cause  to  believe  that  a  search  of  the  Subject  Device 
will  reveal  evidence,  fruit  and  instrumentalities  of  the  Subject  Offenses,  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  involving  Sterling, 
Melrose,  and/or  taxi  medallions; 

b.  Communications,  records,  documents,  and  other  files  involving  a  plan, 
proposal,  or  agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  others,  including  to  |m|||||||||||||||||  and/or 
entities  associated  with  him; 

c.  Communications,  records,  documents,  and  other  files  necessary  to  estabhsh 
the  identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  - 
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who  communicated  with  the  Cohen  Gmail  Account  and/or  the  Cohen  MDCPC  Account  about  any 
plan  or  proposal  or  agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest 
in  taxi  medallions,  and  any  associated  debts  or  liabilities,  to  others,  including  to 
and/or  entities  associated  with  him; 

d.  Communications  between  the  Cohen  Gmail  Account  and/or  the  Cohen 
MDCPC  Account  and  Jeffrey  Getzel  relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or 
finances; 

e.  Evidence  indicating  the  Cohen  Gmail  Account  and  the  Cohen  MDCPC 
Account  owner’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

III.  Procedures  for  Searching  ESI 
A.  Review  of  ESI 

15.  Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and 
agents,  and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and  related 
proceedings,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  interpreters,  and  outside  vendors  or  technical  experts  under 
government  control)  will  review  the  ESI  contained  on  the  Subject  Device  for  information 
responsive  to  the  warrant. 

16.  In  conducting  this  review,  law  enforcement  personnel  may  use  various  methods  to 
locate  evidence,  fruits,  and  instrumentalities  of  the  Subject  Offenses,  including  but  not  limited  to 
undertaking  a  cursory  inspection  of  all  emails  contained  on  the  Subject  Device.  This  method  is 
analogous  to  cursorily  inspecting  all  the  files  in  a  file  cabinet  in  an  office  to  determine  which  paper 
evidence  is  subject  to  seizure.  Although  law  enforcement  personnel  may  use  other  methods  as 
well,  particularly  including  keyword  searches,  I  know  that  keyword  searches  and  similar  methods 
are  typically  inadequate  to  detect  all  information  subject  to  seizure.  As  an  initial  matter,  keyword 
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searches  work  only  for  text  data,  yet  many  types  of  files  commonly  associated  with  emails, 
including  attachments  such  as  scanned  documents,  pictures,  and  videos,  do  not  store  data  as 
searchable  text.  Moreover,  even  as  to  text  data,  keyword  searches  cannot  be  relied  upon  to  capture 
all  relevant  communications  in  an  account,  as  it  is  impossible  to  know  in  advance  all  of  the  umque 
words  or  phrases  that  investigative  subjects  will  use  in  their  communications,  and  consequently 
there  are  often  many  communications  in  an  account  that  are  relevant  to  an  investigation  but  that 
do  not  contain  any  keywords  that  an  agent  is  likely  to  search  for. 

IV.  Conclusion  and  Ancillary  Provisions 

17.  Based  on  the  foregoing,  I  respectfully  request  the  court  to  issue  a  warrant  to  seize 
the  items  and  information  specified  in  Attachment  A  to  this  affidavit  and  to  the  Search  and  Seizure 
Warrant. 

18.  In  Ught  of  the  confidential  nature  of  the  continuing  investigation,  and  for  the 
reasons  more  fully  set  forth  in  the  Accompanying  Affidavit,  I  respectfully  request  that  this  affidavit 
and  all  papers  submitted  herewith  be  maintained  under  seal  until  the  Court  orders  otherwise. 


Special  Agent,  US  AO 


Sworn  to  before, me  on'  I '  / 
28th  day  of  February,  SQI’S' 


) 


IN.  ga: 

fITED ;  DGE 
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Attachment  A 

I.  Device  to  be  Searched 

The  device  to  be  searched  (the  “Subject  Device”)  is  described  as  a  black  and  red  USB  drive 
with  a  white  label  that  says  “Tracking  #;  1 80208140208”,  which  contains  emails  and  other  content 
information  obtained  pursuant  to  the  three  search  warrants,  numbered  17-mj-00503,  17-mj-00855 
and  17-mj-00854,  obtained  by  the  Special  Counsel’s  Office  (“SCO”),  less  the  emails  that  were 
screened  and  removed  by  the  SCO’s  privilege  team. 

II.  Review  of  ESI  on  the  Subject  Devices 

Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and  agents, 
-aud-depending-ou  thnnature  oTthe-ESI-and-the-status-ofthe  investigatiomand  related-proceedings,- 
attomeys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the  government  in 
this  investigation,  interpreters,  and  outside  vendors  or  technical  experts  under  government  control) 
are  authorized  to  review  the  ESI  contained  on  the  Subject  Device  for  evidence,  fruits,  and 
instrumentalities  of  one  or  more  violations  ofl8U.S.C.  §371  (conspiracy  to  defraud  the  United 
States),  1005  (false  banlc  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire 
fi-aud),  and  1344  (bank  fraud)  (collectively,  the  “Subject  Offenses”),  as  listed  below: 

a.  Communications,  records,  documents,  and  other  files  involving  Sterling  National 
Bank,  Mehose  Credit  Union,  and/or  taxi  medallions; 

b.  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or 


agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  others,  including  to  and/or 

entities  associated  with  him; 


c.  The  identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the 

person(s)  —  who  communicated  with  ^^^^^^^|^gmail.com  and/or 
“Subject  Accounts”)  about  any  plan  or  proposal  or  agreement  for  Michael  D.  Cohen  and/or  entities 


associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 


liabilities,  to  others,  including  tol 


|and/or  entities  associated  with  him; 


d.  Communications  between  the  Subject  Accounts  and  Jeffrey  Getzel  relating  to 


Michael  D.  Cohen’s  banlc  accounts,  taxes,  debts,  and/or  finances; 
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e. 


Evidence  indicating  the  owner  of  the  Subject  Accounts’  intent  as  it  relates  to  the 


Subject  Offenses  under  investigation. 
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AO  93  (Rev.  11/13)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

District  of  Columbia 


24  W 


In  the  Matter  of  the  Search  of  ) 

(Briefly  describe  the  property  to  he  searched  ) 

or  identify  the  person  by  name  and  address)  ^ 

INFORMATION  ARSOni^gn  WITH  THE  EMAIL  ) 

ACCOUNT  ^^^^^■@GMAIL.COM  ) 


) 


asej  iLU-roj-OOSOS 

.ssigneaTo:HBwen,BerylA. 

,gsign,Date.//1®01 


SEARCH  AND  SEIZURE  WARRANT 


Tor  '  Any  authorized  law  ef^^  """ .  ' 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 

of  the  following  person  or  property  located  in  the  Northern  District  of  _ California 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location)". 


See  Attachment  A. 


I  find  that  the  affidavit(s)>  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or  property 
described  above,  and  that  such  search  will  reveal  (identify  the  person  or  describe  the  property  to  be  seized): 

See  Attachment  B, 


YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before  _ August  1 ,  2017  (not  to  exceed  14  days) 

^  in  the  daytime  6:00  a,m.  to  10:00  p.m.  □  at  any  time  in  the  day  or  night  because  good  cause  has  been  established. 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  propeity  taken  to  the 
person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the  place  where  the 
property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an  inventory 

as  required  by  law  and  promptly  return  this  warrant  and  inventoiy  to  _ _ Hon,  Beryl  A.  Howell  _  , 

(United  States  Magistrate  Judge) 

□  Pursuant  to  18  U.S.C.  §  SlOSaCb),  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C* 

§  2705  (except  for  delay  of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose 
property,  will  be  searched  or  seized  (check  the  appropriate  box) 

□  for _ (not  to  exceed  SO)  □  until,  the  facts  justifying,  the  later  specific  date  of  _ _  _ 

Date  and  time  issued:  3^//^  _  > 

/  y  Judge ’s  signature 

City  and  state;  Washington,  DC  Hon.  Beryl  A.  Howell,  Chief  U.S.  District  Judge 

Printed  name  and  title 


Case  l:18-cr-00602-WHP  Document  48-4  Filed  07/18/19  Page  16  of  105 


AO  93  (Rev  1 1/13)  Search  and  Seizure  Warrant  (Page  2) 


Return 

Case  No.: 

Date  and  time  warrant  executed: 

7jtb/'2^n 

Copy  of  warrant  and  inventory  left  with: 

1 7  \  QOS&S 

G-oofi^(-<_  Leq^l 

. '  .  ^  . " 

Inventory  made  in  the  presence  of: 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 


Dr^ifal  FiL-s  ■.  \ise>c>e<] 

i  -  'Z0]7oy]q~  ) 


U,..C  V/c/^-A  F,U^ 


JUL  2 1  2017 

Clerk,  u.s.  District  and 
Bankruptcy  Courts 


Ccrtificiition 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant  to  the 
designated  judge. 


Primed  mime  and  (ide 
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'  ATTACHMENT  A 

This  warrant  applies  to  information  associated  with  the  Google  Mail  Account 
l@gmail.com  that  is  stored  at  premises  owned,  maintained,  controlled,  or  operated  by 
Google,  a  company  headquartered  at  1 600  Amphitheatre  Parkway,  Mountain  View,  CA  94043, 
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ATTACHMENT  B 

I.  Information  to  be  disclosed  by  Google 

To  the  extent  that  the  information  described  in  Attachment  A  is  within  the  possession, 
custody,  or  control  of  the  Google  (hereinafter  “the  Provider”),  regardless  of  whether  such 
information  is  stored,  held  or  maintained  inside  or  outside  of  the  United  States,  and  including  any 
emails,  records,  files,  logs,  or  information  that  have  been  deleted  but  are  still  available  to  the 
Provider,  the  Provider  is  required  to  disclose  the  following  information  to  the  government  for  each 
aeeeunfeoEldentifienlistedrin^AttachmentAr-—  _ _ 

a.  The  contents  of  all  emails  associated  with  the  account,  including  stored  or  preserved 
copies  of  emails  sent  to  and  from  the  account,  draft  emails,  the  source  and 
destination  addresses  associated  with  each  email,  the  date  and  time  at  which  each 
email  was  sent,  and  the  size  and  length  of  each  email; 

b.  All  records  or  other  information  regarding  the  identification  of  the  account,  to 
include  full  name,  physical  address,  telephone  numbers  and  other  identifiers, 
records  of  session  times  and  durations,  the  date  on  which  the  account  was  created, 
the  length  of  service,  the  IP  address  used  to  register  the  account,  log-in  IP  addresses 
associated  with  session  times  and  dates,  account  status,  alternative  email  addresses 
provided  during  registration,  methods  of  connecting,  log  files,  and  means  and 
source  of  payment  (including  any  credit  or  bank  account  number); 

c.  The  types  of  service  utilized; 

d.  All  records  or  other  information  stored  at  any  time  by  an  individual  using  the 
account,  including  address  books,  contact  and  buddy  lists,  calendar  data,  pictures, 
and  files; 

e.  All  records  pertaining  to  communications  between  the  Provider  and  any  person 
regarding  the  account,  including  contacts  with  support  services  and  records  of 
actions  taken;  and  other  identifiers,  records  of  session  times  and  durations,  the  date 
on  which  the  account  was  created,  the  length  of  service,  the  types  of  service  utilized, 
the  IP  address  used  to  register  the  account,  log-in  IP  addresses  associated  with 
•session  times  and  dates,  account  status,  alternative  e-mail  addresses  provided 
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during  registration,  all  other  user  names  associated  with  the  account,  all  account 
names  associated  with  the  subscriber,  methods  of  connecting; 

f.  All  search  history  or  web  history; 

g.  All  records  indicating  the  services  available  to  subscribers  of  the  accounts; 

h.  All  usernames  associated  with  or  sharing  a  login  IP  address  or  browser  cookie  with 
the  accounts; 

i.  All  cookies,  including  third-party  cookies,  associated  with  the  user; 

j.  All  records  that  are  associated  with  the  machine  cookies  associated  with  the  user; 

k.  All  telephone  or  insti'ument  numbers  associated  with  the  Account  (including  MAC 
addresses.  Electronic  Serial  Numbers  (“ESN”),  Mobile  Electronic  Identity 
Numbers  (“MEIN”),  Mobile  Equipment  Identifier  (“MEID”),  Mobile  Identification 
Numbers  (“MIN”),  Subscriber  Identity  Modules  (“SIM”),  Mobile  Subscriber 
Integrated  Services  Digital  Network  Number  (“MSISDN”),  International  Mobile 
Subscriber  Identifiers  (“IMSI”),  or  International  Mobile  Equipment  Identities 
(“IMEI”). 

IL  Information  to  be  Seized  by  the  Government 

All  information  described  above  in  Section  I  that  constitutes  evidence,  contraband,  fruits, 
and/or  instrumentalities  of  violations  of  18  U.S.C.  §  1014  (false  statements  to  a  financial 
institution)  and  18  U.S.C.  §  1956  (money  laundering),  as  well  as  18  U.S.C.  §  951  (acting  as  an 
unregistered  foreign  agent)  and  the  Foreign  Agents  Registration  Act  (“FARA”),  22  U.S.C.  §  61 1 
et  seq.,  involving  Michael  Dean  Cohen  and  occurring  on  or  after  January  1,  2016,  including,  for 
each  account  or  identifier  listed  on  Attachment  A,  information  pertaining  to  the  following  matters: 

a.  Communications,  records,  documents,  and  other  files  involving  Essential 
Consultants,  LLC; 

b.  Communications,  records,  documents,  and  other  files  involving  Bo  and  Abe  Realty, 
LLC; 

c.  Communications,  records,  documents,  and  other  files  that  false  representations  to  a 
financial  institution  with  relation  to  intended  the  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an 
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account  a  financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the 
purpose  or  nature  of  any  financial  transactions  involving  that  financial  institution; 

d.  Records  of  any  funds  or  benefits  received  by  or  offered  to  Michael  Dean  Cohen  by, 
or  on  behalf  of,  any  foreign  government,  foreign  officials,  foreign  entities,  foreign 
persons,  or  foreign  principals; 

e.  Communications,  records,  documents,  and  other  files  that  reveal  efforts  by  Michael 
Dean  Cohen  to  conduct  activities  on  behalf  of,  for  the  benefit  of,  or  at  the  direction 
of  any  foreign  government,  foreign  officials,  foreign  entities,  foreign  persons,  or 

''''^^^^TKMfffTjrfflcipalsr'^^  ^  . 

f.  Evidence  indicating  how  and  when  the  account  was  accessed  or  used,  to  determine 
the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating 
to  the  crimes  under  investigation  and  to  the  account  owner; 

g.  Evidence  indicating  the  account  owner’s  state  of  mind  as  it  relates  to  the  crimes 
under  investigation; 

h.  The  identity  of  the  person(s)  who  created  or  used  the  account,  including  records 
that  help  reveal  the  whereabouts  of  such  person(s);  and 

ii  The  identity  of  any  person(s) — including  records  that  help  reveal  the  whereabouts 
of  the  person(s) — ^who  communicated  with  the  account  about  any  matters  relating 
to  activities  conducted  by  Michael  Dean  Cohen  on  behalf  of,  for  the  benefit  of,  or 
at  the  direction  of  any  foreign  government,  foreign  officials,  foreign  entities, 
foreign  persons,  or  foreign  principals. 


Case  l:18-cr-00602-WHP  Document  48-4  Filed  07/18/19  Page  21  of  105 


Exhibit  B 
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AO  93  (Rev.  1 1/13)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

District  of  Columbia 

In  the  Matter  of  the  Search  of 
(Briefly  describe  the  property  to  he  searched 
or  Identify  the  parson  by  name  and  address) 

WITH  THE  EMAIL 
@(3MAILC(jM 


SEARCH  AND  SEIZURE  WARRANT 

To;  ^  Tiny'^thof izeh  Im  enfoiwin®  officer”  ™  ~ 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  goveilunent  requests  the  search 
of  the  following  person  or  property  located  in  the  Northern  District  of  California 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location)''. 


IN  FORMATION^gggoi^Tgn 

ACObUNT^^^^^I 


) 

)  Case:  1 : 1 7-mj~00855 

)  Assigned  To  :  Chief  Judge  Howell,  Beryl  A. 
^  Assign.  Date  ;  11/13/2017 

\  Description:  Search  and  Seizure  Warrant 


See  Attachment  A* 


I  find  that  the  affidavitfs),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or  property 
described  above,  and  that  such  search  will  reveal  (identify  the  person  or  describe  the  property  to  be  seized)'. 


See  Attachment  B. 


YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before  November  20,  2017  (not  to  exceed  14  days) 

^  ill  the  daytirxie  6;00  to  10;00  p.'m.  □  at  any  time  In  the  day  or  night  because  good  cause  has  been  established. 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  wanant  and  a  receipt  for  the  property  taken  to  the 
person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the  place  where  the 
property  was  taken* 

The  officer  executing  this  waitaht,  or  an  officer  present  during  the  execution  of  the  wartaiit,  must  prepare  an  invehtory 
as  required  by  law  and  promptly  return  this  warrant  and  inventoiy  to _ _ Hon.  Beryl  A.  Howell _ * 

(United  States  Magistrate  Judge) 

□  Pursuant  to  1 8  U*S*C.  §  3 1 03 a(b),  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  1 8  U.S.G. 

§  2705  (except  for  delay  of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose 
property,  will  be  searched  or  seized  (check  the  appropriate  box) 

□  for  _ _ days  (not  to  exceed  ^0)  □  Until,  the  facts  justifying,  the  later  specific  date  of  _ . 

Judge 's  signature 

Hon.  Beryl  A.  Hovveli,  Chief  U.S.  District  Judge 

Printed  name  and  title 


Date  and  time 


issued:  /r/vj/ 


City,  and  state: 


Washington,  DC 
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Ad  93  (Rfiv.  1 1/13)  Search  and  Seizure  Warrant  (Page .2) 


Return 

Case  No.: 

Date  and  time  warrant  executed; 

Copy  of  warrant  and  inventoi'y  left  with: 

Inventoiy  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 


Certification 


I  declare  under  penalty  of  perjury  tliat.this  inyentoiy  is  correct  and  was  returned  along  with  the  original  wairant  to  the 
designated  judge. 


Date:  _ _  _ 

Executing  officer 's  signature 


Printed  name  and  title 
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ATTACHMENT  A 

This  warrant  applies  to  information  associated  with  the  Google  Mail  Account 
that  is  stored  at  premises  owned,  maintained,  controlled,  or  operated 
by  Google,  a  company  headquartered  at  1 600  Amphitheatre  Parkway,  Mountain  View,  CA  94043. 
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ATTACHMENT  B 

I.  Information  to  be  disclosed  by  Google 

To  the  extent  that  the  information  described  in  Attachment  A  is  within  the  possession, 
custody,  or  control  of  the  Google  (hereinafter  “the  Provider”),  regardless  of  whether  such 
information  is  stored,  held  or  maintained  inside  or  outside  of  the  United  States,  and  including  any 
emails,  records,  files,  logs,  or  information  that  have  been  deleted  but  are  still  available  to  the 
Provider,  the  Provider  is  required  to  disclose  the  following  information  to  the  government  for  each 
account  or  identifier  listed  in  Attachment  A: 

a.  The  contents  of  all  emails  associated  with  the  account,  including  stored  or  preserved 
copies  of  emails  sent  to  and  from  the  account,  draft  emails,  the  source  arid 
destination  addresses  associated  with  each  email,  the  date  and  time  at  which  each 
email  was  sent,  and  the  size  and  length  of  each  email; 

b.  All  records  or  other  information  regarding  the  identification  of  the  account,  to 
iticlude  full  name,  physical  address,  telephone  numbers  and  other  identifiers, 
records  of  session  times  and  durations,  the  date  on  which  the  account  was  created, 
the  length  of  service,  the  IP  address  used  to  register  the  account,  log-in  IP  addresses 
associated  with  session  times  and  dates,  account  status,  alternative  email  addresses 
provided  during  registration,  methods  of  contiecting,  log  files,  and  means  and 
source  of  payment  (including  any  credit  or  bank  account  number); 

c.  The  types  of  service  utilized; 

d.  All  records  or  other  infonnation  stored  at  any  time  by  an  individual  using  the 
account,  including  address  books,  contact  and  buddy  lists,  calendar  data,  pictures, 
and  files; 

e.  All  records  peifaining  to  communications  between  the  Provider  and  any  person 
regarding  the  account,  including  contacts  with  support  services  and  records  of 
actions  taken;  and  other  identifiers,  I'ecords  of  session  times  and  durations,  tlie  date 
on  which  tlie  account  was  created,  the  length  of  service,  the  types  of  service  utilized, 
the  IP  address  used  to  register  the  account,  log-in  DP  addresses  associated  with 
session  times  and  dates,  account  status,  alternative  e-mail  addresses  provided 
during  registration,  all  other  user  names  associated  with  the  account,  all  account 
names  associated  with  the  subscriber,  methods  of  connecting; 
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f.  All  search  history  or  web  history; 

g.  All  records  indicating  the  services  available  to  subscribers  of  the  accounts; 

h.  All  usernames  associated  with  or  sharing  a  login  IP  address  or  browser  cookie  with 
the  accounts; 

i.  All  cookies*  including  third-party  cookies,  associated  with  the  user; 

j.  All  records  that  are  associated  with  the  machine  cookies  associated  with  the  user; 
and 

k.  All  telephone  or  instrument  numbers  associated  with  the  Account  (including  MAC 
addresses.  Electronic  Serial  Numbers  (“ESN”),  Mobile  Electronic  Identity 
Numbers  (“MEIN”),  Mobile  Equipment  Identifier  (“MEID”),  Mobile  Identification 
Numbers  (“MIN”),  Subscriber  Identity  Modules  (“SIM”),  Mobile  Subscriber 
Integrated  Seiwices  Digital  Network  Number  (“MSISDN”),  International  Mobile 
Subscriber  Identifiers  (“IMSI”),  or  International  Mobile  Equipment  Identities 
(“IMEl”). 

n.  Information  to  be  Seized  by  the  Government 

All  information  described  above  in  Section  I  that  constitutes  evidence,  contraband,  fruits, 
and/or  instrumentalities  of  violations  of  18  U.S.C.  §  1014  (false  statements  to  a  financial 
institution),  18  U.S.C.  §  1343  (wire  fraud),  18  U.S.C,  §  1344  (bank  fraud),  and  18  U.S.C.  §  1956 
(money  laundering),  as  well  as  18  U.S.C.  §  951  (acting  as  an  unregistered  foreign  agent)  and  the 
Foreign  Agents  Registration  Act  (“FARA”),  22  U.S.C.  §  61 1  et  seq.,  involving  Michael  Dean 
Cohen  and  occurring  on  or  after  June  1,  2015,  including,  for  each  account  or  identifier  listed  on 
Attachment  A,  information  pertaining  to  the  following  matters: 

a.  Communications,  records,  documents,  and  other  files  involving  Essential 
Consultants,  LLC; 

b.  Communications,  records,  documents,  and  other  files  that  false  representations  to  a 
financial  institution  with  relation  to  intended  the  purpose  of  an  account  pr  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an 
account  a  financial  institution;  the  source  of  funds  flowing  into  an  account;  Or  the 
purpose  or  nature  of  any  financial  transactions  involving  that  financial  institution; 
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c.  Records  of  any  funds  dr  benefits  received  by  or  offered  to  Michael  Dean  Cohen  by, 
or  on  behalf  of,  any  foreign  government,  foreign  officials,  foreign  entities,  foreign 
persons,  or  foreign  principals; 

d.  Communications,  records,  documentSj  and  other  files  that  reveal  efforts  by  Michael 
Dean  Cohen  to  conduct  activities  on  behalf  of,  for  the  benefit  of,  or  at  the  direction 
of  any  foreign  government,  foreign  officials,  foreign  entities,  foreign  persons,  or 
foreign  principals; 

e.  Evidence  indicating  how  and  when  the  account  was  accessed  or  used,  to  determine 
lhe^ebpaphic”ahd'ehroholmgiMl  comtexfdfaccouhfacc^ess,  usfoaHdevent^elafing^ 
to  the  crimes  under  investigation  and  to  the  account  owner; 

f.  Evidence  indicating  the  account  owner’s  state  of  mind  as  it  relates  to  the  crimes 
under  investigation; 

g.  The  identity  of  tlie  person(s)  who  created  or  used  the  account,  including  records 
that  help  reveal  the  whereabouts  of  such  person(s);  and 

h.  The  identity  of  any  person(s) — ^including  records  that  help  reveal  the  whereabouts 
of  the  person(s) — ^who  communicated  with  the  account  about  any  matters  relating 
to  activities  conducted  by  Michael  Dean  Cohen  on  behalf  of,  for  the  benefit  of,  or 
at  the  direction  of  any  foreign  government,  foreign  officials,  foreign  entities, 
foreign  persons,  or  foreign  principals, 

in.  Review  Protpcpls 

Review  of  the  items  described  in  Attachment  A  and  Attachment  B  shall  be  conducted 
pursuant  to  established  procedures  designed  to  colleot  evidence  in  a  manner  consistent  with 
professional  responsibility  requirements  concei'ning  the  maintenance  of  attorney-client  and  other 
operative  privileges.  When  appropriate,  the  procedures  shall  include  use  of  a  designated  “filter 
team,”  separate  and  apart  fi‘om  the  investigative  team,  in  order  to  address  potential  privileges. 
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Exhibit  C 
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AQ  93  (Rev.  I  I/I  3)  Search  and  Seizure  Warrant 


United  States  District  Court  . .  . 

for  the 

District  of  Columbia 

) 

)  Case:  1;17-mj-00854 
)  Assigned  To  :  Chief  Judge  Howell,  Beryl  A. 
)  Assign.  Date  :  11/13/2017 
^  Description;  Search  and  Seizure  Warrant 


SEARCH  AND  SEIZURE  WARRANT 

To:  Any  authorized  law  enforcement  officer 

An  application  by  a  fedetal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 
of  the  following  person  or  property  located  in  the  _ Northern _  District  of  _  California 

(identify  the  person  or  describe  the  property*  to  be  searched  and-give  its  }ocation)X 

See  Attachment  A. 


I  find  that  the  affidavitCs),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or  property 
described  above,  and  that  such  search  will  reveal  (identify  the  person  or  describe  the  property  to  be  seized): 

See  Attachment  B, 


tn  the  Matter  of  the  Search  of 

(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

IWPORM^TTO^SSO^TED  with  the  account 

IS  STORED  AT  THE 

^^"■PREMISES  OF  1&1  INTERNET,  INC. 


YOU  ARE  commanded  to  execute  this  waiTant  on  or  before  November  20,  2Q1 7  (not  to  exceed  U  days) 

^  in  the  daytime  6:Q0  a,m.  to  10:00  p,m.  D  at  any  time  in  the  day  or  night  because  good  cause  has  been  established 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  pi’operty  taken  to  the 
person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the  place  where  the 
property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  wairant,  must  prepare  an  inventory 

a$  required  by  taw  and  promptly  return  this  waiTant  and  inventory  to _ _ Hon^  .Beryl  A,  Howell _ , 

(United  States  Magistrate  Judge) 

□  Pursuant  to  18  U.S.G.  §  3103a(b),  I  find  that  immediate  notification  may  have  an  adverse  result. listed  in  18  U.S.C. 

§  2705  (except  for  delay  of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose 
propeily,  will  be  searched  or  seized  (check  the  appropriate  box) 

O  for _ days  (not  to  exceed  30)  □  until,  the  facts  justiiying,  the  later  specific  date  of  _ . 


Date  and  time  issued: 


City  and  state: 


Judge  *s  signature 

Hon.  Beryl  A:  Howell,  Chief  U.S.  District  Judge 

Printed  name  and  tide 
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AO  93  (Rev.  i  1/13)  Search  and  Seizure  Warrant  (Page 2) 


Return 

Case  No.i  Date  and  time  warrant  executed:  Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of ; 

Inventoiy  of  the  property  takeU  and  name  of  any  person(s)  seized: 

Certification 

1  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant  to  the 
designated  judge, 

Date: 

Executing  officer  *s  signatiire 

Printed  name  dnd  iifJe 
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ATTACHMENT  A 

This  warrant  applies  to  information  associated  with  the  eMail  ^^^Q|^^^^^that 
is  stored  at  premises  owned,  maintained,  controlled,  or  operated  by  l&l  Internet,  Inc.  ("l&l”),  an 
electronic  communication  and/or  remote  computing  service  provider  headquartered  in  Sunnyvale, 
California. 
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ATTACHMENT  B 

I,  Information  to  be  disclosed  by  l&l 

To  the  extent  that  the  infomation  desci'ibed  in  Attachment  A  is  within  the  possession, 
custody,,  or  control  ofthe  l&l  (hereinafter  “the  Provider”),  regardless  of  whether  such  information 
is  stored,  held  or  maintained  inside  or  outside  of  the  United  States,  and  including  any  erhails, 
records,  files,  logs,  or  information  that  have  been  deleted  but  are  still  available  to  the  Provider,  the 
Provider  is  required  to  disclose  the  following  information  to  the  government  for  each  account  or 
identifier  listed  in  Attachment  A: 

a.  The  contents  of  all  emails  associated  with  the  account,  including  stored  or  preserved 
copies  of  emails  sent  to  and  from  the  account,  draft  emails,  die  source  and 
destination  addresses  associated  with  each  email,  the  date  and  time  at  which  each 
email  was  sent,  and  the  size  and  length  of  each  email; 

b.  All  records  or  other  information  regarding  the  identification  of  the  account,,  to 
include  full  name,  physical  address,  telephone  numbers  and  other  identifiers, 
records  of  session  times  and  durations,  the  date  on  which  the  account  was  created, 
the  length  of  service,  the  IP  address  used  to  register  the  account,  log-in  IP  addresses 
associated  with  session  times  and  dates,  account  status,  alternative  email  addresses 
provided  during  registration,  methods  Of  connecting,  log  files,  and  means  and 
source  of  payment  (including  any  credit  or  bank  account  number); 

c.  The  types  of  service  utilized; 

d.  All  records  or  other  information  stored  at  any  time  by  an  individual  using  the 
account,  including  address  books,  contact  and  buddy  lists,  calendar  data,  pictures, 
and  files; 

e.  All  records  pertaining  to  communications  between  the  Provider  and  any  person 
regarding  the  account,  including  contacts  with  support  services  and  records  of 
actions  taken;  and  other  identifiers,  records  of  session  times  and  durations,  the  date 
on  which  the  account  was  created,  the  length  ofservice,  the  types  of  service  utilized, 
the  IP  address  used  to  register  the  account,  log-in  IP  addresses  associated  with 
session  times  and  dates,  account  status,  altemative  e-mail  addresses  provided 
during  registration,  all  other  user  names  associated  with  the  account,  all  account 
names  associated  with  the  subscriber,  methods  of  .connecting; 
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f.  All  search  history  or  web  history; 

g.  All  records  indicating  the  sei-vices  available  to  subscribers  of  the  accounts; 

h.  All  usernames  associated  with  or  sharing  a  logiii  IP  address  or  browser  cookie  with 
the  accounts; 

i.  All  cookies,  including  third-party  cookies,  associated  with  the  user; 

j.  All  records  that  are  associated  with  tlie  machine  cookies  associated  with  the  user; 
and 

k.  All  telephone  or  instrument  numbers  associated  with  the  Account  (including  MAC 
addresses,  Electronic  Serial  Numbers  (“ESN”),  Mobile  Electronic  Identity 
Numbers  (“MEIN”),  Mobile  Equipment  Identifier  (“MEID”),  Mobile  Identification 
Numbers  (“MIN”),  Subscriber  Identity  Modules  (“SIM”),  Mobile  Subscriber 
Integrated  Services  Digital  Network  Number  (“MSISDN”),  International  Mobile 
Subscriber  Identifiers  (“IMSI”),  or  International  Mobile  Equipment  Identities 
(“IMEI”). 

n.  Information  to  be  Seized  by  the  Government 

All  information  described  above  in  Section  I  that  constitutes  evidence,  contraband,  fmits, 
and/or  instrumentalities  of  violations  of  18  U.S.C.  §  1014  (false  statements  to  a  financial 
institution),.! 8  U.S.C.  §  1343  (wire  fraud),  18  U.S.C.  §  1344  (bank  fraud),  and  18  U.S.C.  §  1956 
(money  laundering),  as  well  as  18  U.S.C.  §  951  (acting  as  an  unregistered  foreign  agent)  and  the 
Foreign.  Agents  Registration  Act  (“FARA”),  22  U.S.C,  §  611  et  seq.,  involving  Michael  Dean 
Cohen,  including,  for  each  account  or  identifier  listed  on  Attachment  A,  information  pertaining  to 
the  following  matters: 

a.  Communications,  records,  documents,  and  other  files  involving  Essential 
Consultants,  LLC; 

b.  Communications,  records,  documents,  and  other  files  that  false  representations  to  a 
financial  institution  with  relation  to  intended  the  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business,  or  entity  associated  with  an 
account  a  financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the 
purpose  or  nature  of  any  financial  transactions  involving  that  financial  institution; 
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c.  Records  of  any  funds  or  benefits  received  by  or  offered  to  Michael  Dean  Cohen  by, 
or  on  behalf  of,  any  foreign  government,  foreign  officials,  foreign  entities,  foreign 
persons,  or  foreign  principals; 

d.  Communications,  records,  documents,  and  other  files  that  reveal  efforts  by  Michael 
Dean  Cohen  to  conduct  activities  on  behalf  of,  for  the  benefit  of,  or  at  the  direction 
of  any  foreign  government,  foreign  officials,  foreign  entities,  foreign  persons,  or 
foreign  principals; 

e.  Evidence  indicating  how  and  when  the  account  was  accessed  or  used,  to  determine 
the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating 
to  the  crimes  under  investigation  and  to  the  account  owner; 

f.  Evidence  indicating  the  account  owner’s  state  of  mind  as  it  relates  to  the  crimes 
under  investigation; 

g.  ■  The  identity  of  the  person(s)  who  created  or  used  the  accourit,  including  records 

that  help  reveal  the  whereabouts  of  such  person(s);  and 

h.  The  identity  of  any  person(s) — including  records  that  help  reveal  the  whereabouts 
of  the  person(s) — ^who  conimunicated  with  the  account  about  any  matters  relating 
to  activities  conducted  by  Michael  Dean  Cohen  on  behalf  of,  for  the  benefit  of,  or 
at  the  direction  of  any  foreign  goyernrnent,  foreign  officials,  foreign  entities, 
foreign  persons,  or  foreign  principals, 

III.  Review  Protocols 

Review  of  tlie  items  described  in  Attachment  A  and  Attachment  B  shall  be  conducted 
pursuant  to  established  procedures  designed  to  collect  evidence  in  a  manner  consistent  with 
professional  responsibility  requirements  coriceming  the  maintenance  of  attorney-client  and  other 
operative  privileges.  When  appropriate,  the  procedures  shall  include  use  of  a  designated  “filter 
team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address  potential  privileges. 
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Exhibit  D 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISNIICT  OF  NEW  YORK 


In  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 
^^^^^^^dth  the  Email  Accounts 
^^^^^^|@gmail.com. 

TO  BE  FILED  UNDER  SEAL 

AGENT  AFFIDAVIT 

Maintained 

Premises  ControlledbyGoo^eNnc., 
the  Email  Accoxmt^^^^^^^^l 

Maintained  at  Premises  Controlled  by 
■  -  Oath,  Tncij-and  the-Email  Account 

maintained 

Premises  Controlled  by  1  &  1  Internet, 

Inc.,  USAO  Reference  No. 

2018R00127 

Agent  Affidavit  in  Support  of  Application  for  a  Search  Warrant 
for  Stored  Electronic  Communications 


STATE  OF  NEW  YORK  ) 

)  ss. 

COUNTY  OF  NEW  YORK  ) 

)f  the  United  States  Attorney’s  Office  for  the  Southern 
District  of  New  York,  being  duly  sworn,  deposes  and  states; 

L  Introduction 
A.  Affiant 

1 .  I  am  a  Special  Agent  with  the  United  States  Attorney’s  Office  for  the  Southern  District 
of  New  York  (the  “USAO”).  I  have  been  a  Special  Agent  with  the  USAO  since  August  2016.  I 
previously  served  as  a  Special  Agent  with  the  United  States  Department  of  Labor  Inspector 
General  from  May  2011  to  August  2016.  In  the  course  of  my  experience  and  training  in  these 
positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a  wide  array 


Special  Agent 
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of  financial  crimes,  including  frauds  on  financial  institutions.  I  also  have  training  and  experienee 
exeeuting  seareh  warrants,  including  those  authorizing  the  search  of  email  accounts. 

B.  The  Provider,  the  Subject  Account  and  the  Subject  Offenses 

2.  I  make  this  affidavit  in  support  of  an  application  for  a  search  warrant  pursuant  to  18 
U.S.C.  §  2703  for  all  content  and  other  information  associated  with  the  email  accounts 

(the  “MDCPC 


Account”), 


Account”),  and  ^^J^aol.com  (the  ^^^jAccount”)  (collectively,  the 
“Subject  Accounts”).  The  Cohen  Account,  Account, 

Account  are  maintained  and  controlled  by  Google,  Inc.,  headquartered  at  1600  Amphitheatre 
Parkway,  Mountain  View,  California  94043  (“Google”),  the  MDCPC  Account  is  maintained  and 
controlled  by  1  &  1  Internet,  Inc.,  headquartered  at  701  Lee  Road,  Suite  300,  Chesterbrook, 
Pennsylvania  19087  (“1  &  1”),  and  the^^^|kccount  is  maintained  and  controlled  by  Oath,  Inc., 
22000  AOL  Way,  Dulles,  Virginia  20166  (“Oath”)  (together,  the  “Providers”).  The  information 
to  be  searched  is  described  in  the  following  paragraphs  and  in  Attachments  A,  B,  C  and  D  to  the 
proposed  warrants. 

3.  As  detailed  below,  there  is  probable  cause  to  believe  that  the  Subject  Accounts  contain 
evidence,  fruits,  and  instrumentalities  of  violations  of  18  U.S.C.  §  371  (conspiracy  to  defraud  the 
United  States),  1005  (false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (bank  fraud)  (collectively,  the  “Subject  Offenses”).  The  Target  Subjects  of 
this  investigation  are  MICHAEL  COHEN  (“Cohen”)  and  others  known  and  unknown.  This 
affidavit  is  based  upon  my  personal  Icnowledge,  my  review  of  documents  produced  pursuant  to 
grand  jury  subpoenas  and  prior  search  warrants,  my  review  of  interview  reports  prepared  by  other 
law  enforcement  officers,  and  my  conversations  with  other  law  enforcement  officers,  as  well  as 


@gmail.com  (the  I 


lAccount”). 


|;^gmail.eom  (the  “Cohen  Account”), 
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my  training  and  experience  concerning  the  use  of  email  in  criminal  activity.  Because  this  affidavit 
is  being  submitted  for  the  limited  purpose  of  establishing  probable  cause,  it  does  not  include  all 
the  facts  I  have  learned  during  my  investigation.  Where  the  contents  of  documents  and  the  actions, 
statements,  and  conversations  of  others  are  reported  herein,  they  are  reported  in  substance  and  in 
part,  except  where  otherwise  indicated. 

C.  Services  and  Records  of  the  Provider 

4.  1  have  learned  the  following  about  the  Providers: 

a.  The  Providers  offer  email  services  to  the  public.  In  particular,  Google  permits 

subscribers  to  maintain  email  accounts  under  the  domain  name  gmail.com.  Google  also  allows  a 
subscriber  to  maintain  email  accounts  under  any  domain  name  under  the  subscriber’s  control.  For 
example,  if  a  subscriber  controls  the  domain  name  Google  enables  the  subscriber 

to  host  any  email  address  rmder  this  domain  name  on  servers  operated  by  Google.  Oath  permits 
subscribers  to  maintain  email  accounts  under  the  domain  name  aol.com.  1  &  1  permits  subscribers 
to  maintain  email  accounts  under  any  domain  name  under  the  subscriber’s  control.  For  example, 
if  a  subscriber  controls  the  domain  name  1  &  1  enables  the  subscriber  to  host  any 

email  address  under  this  domain  name  on  servers  operated  by  1  &  1 .  A  subscriber  using  the 
Providers’  services  can  access  his  or  her  email  account  from  any  computer  cormected  to  the 
Internet. 

b.  The  Providers  maintain  the  following  records  and  information  with  respect  to  every 
subscriber  account: 

i.  Email  contents.  In  general,  any  email  (which  can  include  attachments  such 
as  documents,  images,  and  videos)  sent  to  or  from  a  subscriber’s  account,  or  stored  in  draft  form 
in  the  account,  is  maintained  on  the  Providers’  servers  unless  and  until  the  subscriber  deletes  the 
email.  If  the  subscriber  does  not  delete  the  email,  it  can  remain  on  the  Providers’  computers 
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indefinitely.  Even  if  the  subscriber  deletes  the  email,  it  may  continue  to  be  available  on  the 
Provider’s  servers  for  a  certain  period  of  time. 

ii.  Address  book.  The  Providers  also  allow  subscribers  to  maintain  the 
equivalent  of  an  address  book,  comprising  email  addresses  and  other  contact  information  of  other 
email  users. 

iii.  Subscriber  and  billing  information.  The  Providers  collect  and  maintain 
(typicall-y-unverified)-identifyingTnformatiomabout-each-Subscriber.-including.-for-example.-name. 
username,  address,  telephone  number,  and  alternate  email  addresses.  The  Providers  also  maintain 
records  concerning  the  date  on  which  the  account  was  created,  the  Internet  protocol  (“IP”)  address 
of  the  user  at  the  time  of  account  creation,  the  current  status  of  the  account  (e.g.,  active  or  closed), 
the  length  of  service,  and  the  types  of  services  utilized  by  the  subscriber.  Additionally,  for  paying 
subscribers,  the  Providers  maintain  records  of  the  subscriber’s  means  and  source  of  payment, 
including  any  credit  card  or  bank  account  number. 

iv.  Transactional  information.  The  Providers  also  typically  retain  certain 
transactional  information  about  the  use  of  each  account  on  its  system.  This  information  can  include 
records  of  login  (f.e.,  session)  times  and  durations  and  the  methods  used  to  coimect  to  the  account 
(such  as  logging  into  the  account  through  the  Providers’  website). 

V.  Customer  correspondence.  The  Providers  also  typically  maintain  records 
of  any  customer  service  contacts  with  or  about  the  subscriber,  including  any  inquiries  or 
complaints  concerning  the  subscriber’s  account. 

vi.  Search  history.  Google  and  Oath  also  typically  maintain  records  of  any 
search  history  or  web  history  associated  with  the  subscriber’s  account. 
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vii.  Associated  content.  Google  also  typically  maintains  content  and  records 
relating  to  the  following  applications  that  are  associated  with  its  e-mail  accounts:  (A)  “Google 
Docs,”  which  provides  document-editing  software  that  can  be  used  to  create,  share,  store,  and 
manage  documents  online;  (B)  “Google  Drive,”  which  enables  users  to  store  files  on  Google 
servers,  where  they  can  be  accessed  remotely  by  the  user  and  others;  and  (C)  “Gchat”  or  “Instant 
Messenger,”  which  provides  a  chat  interface  through  which  users  can  communicate  with  each 

other-in-reaLtime _ ^Oath-also-typically-maintains-  content-and-records  relatingAo_A-QL-instant 

message,  which  provides  a  chat  interface  through  which  users  can  communicate  with  each  other 
in  real  time. 

viii.  Preserved  and  backup  records.  The  Providers  also  maintain  preserved 
copies  of  the  foregoing  categories  of  records  with  respect  to  an  account,  for  at  least  90  days,  upon 
receiving  a  preservation  request  from  the  Government  pursuant  to  18  U.S.C.  §  2703(1).  The 
Providers  may  also  maintain  backup  copies  of  the  foregoing  categories  of  records  pursuant  to  its 
own  data  retention  policy. 

D.  Jurisdiction  and  Authority  to  Issue  Warrant 

5.  Pursuant  to  1 8  U.S.C.  §§  2703(a),  (b)(1)(A)  &  (c)(1)(A),  the  Government  may  require 
a  provider  of  an  electronic  communications  service  or  a  remote  computing  service,  such  as  the 
Providers,  to  disclose  all  stored  content  and  all  non-content  records  or  other  information  pertaining 
to  a  subscriber,  by  obtaining  a  warrant  issued  using  the  procedures  described  in  the  Federal  Rules 
of  Criminal  Procedure. 

6.  A  search  warrant  under  §  27 03  may  be  issued  by  “any  district  court  of  the  United  States 
(including  a  magistrate  judge  of  such  a  court)”  that  “has  jurisdiction  over  the  offense  being 
investigated.”  18  U.S.C.  §  2711(3)(A)(i). 
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7.  When  the  Government  obtains  records  under  §  2703  pursuant  to  a  search  warrant,  the 
Government  is  not  required  to  notify  the  subscriber  of  the  existence  of  the  warrant.  18  U.S.C. 
§  2703(a),  (b)(1)(A),  (c)(2)  &  (3).  Additionally,  the  Government  may  obtain  an  order  precluding 
the  Provider  from  notifying  the  subscriber  or  any  other  person  of  the  warrant,  for  such  period  as 
the  Court  deems  appropriate,  where  there  is  reason  to  believe  that  such  notification  will  seriously 
jeopardize  an  investigation.  18  U.S.C.  §  2705(b). 


- == - . . -..z: - — . — — 

8.  On  or  about  July  1 8, 2017,  in  connection  with  an  investigation  being  conducted  by  the 
Office  of  the  Special  Counsel  (“SCO”),  the  Federal  Bureau  of  Investigation  (“FBI”)  sought  and 
obtained  from  the  Honorable  Beryl  A.  Howell,  Chief  United  States  District  Judge  for  the  District 
of  Columbia,  a  search  warrant  for  emails  in  the  Cohen  Account  sent  or  received  between  January 
1,  2016  and  July  18,  2017.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  from 
Judge  Howell  search  warrants  for  emails  in  the  Cohen  Account  sent  or  received  between  June  1, 
2015  and  November  13,  2017,  and  emails  in  the  MDCPC  Account  sent  or  received  between  the 
opening  of  the  account  and  November  13,  2017.  The  SCO  has  since  referred  certain  aspects  of 
their  investigation  into  Cohen  to  the  USAO,  which  is  working  with  the  FBI’s  New  York  Field 
Office.  As  part  of  that  referral,  the  SCO  provided  the  USAO  with  emails  and  other  content 
information  obtained  pursuant  to  the  search  warrants  executed  by  the  SCO,  which  had  already 
been  reviewed  for  privilege.^  As  discussed  below,  this  affidavit  is  based  in  part  on  my  review  of 


^  In  an  abundance  of  caution,  in  a  separate  application  the  USAO  has  sought  authorization, 
pursuant  to  Fed.  R.  Crim.  P.  41 ,  to  review  the  emails  obtained  pursuant  to  the  Prior  Cohen  Account 
Warrants  for  evidence  related  to  certain  additional  conduct  that  was  not  the  focus  of  the  Prior 
Cohen  Account  Warrants.  The  emails  obtained  from  the  Prior  Cohen  Account  Warrants  that  relate 
to  that  additional  conduct  do  not  form  a  basis  for  the  instant  application. 
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responsive  materials  produced  pursuant  to  the  July  1 8  and  November  13, 2017  warrants  (the  “Prior 
Cohen  Account  Warrants”). 

9.  On  or  about  November  7, 20 1 7,  and  January  4,  20 1 8,  as  well  as  certain  prior  dates,  the 
SCO  sought  and  obtained  from  Judge  Howell  orders  authorizing  and  extending  the  installation  and 
use  of  pen  registers  and  trap  and  trace  devices  to  record  communications  sent  to  or  from  the  Cohen 
Account.  The  SCO  has  provided  pen  register  data  obtained  pursuant  to  those  orders  to  the  USAO. 


“This'affidavit=as”discussed-belowfis=baseddn=part  on=my-review-ofrthe'pen  register-data  obtained- 


pursuant  to  the  November  7,  2017  and  January  4,  2018  orders  (the  “Pen  Register  Data”). 

10.  On  or  about  February  16,  2018,  the  USAO  sought  and  obtained  from  the  Honorable 
Debra  Freeman,  United  States  Magistrate  Judge  for  the  Southern  District  of  New  York,  an  order 
pursuant  to  18  U.S.C.  §  2703(d)  for  email  header  information  associated  with  the  MDCPC 
Account.  This  affidavit,  as  discussed  below,  is  based  in  part  on  my  review  of  email  header 
information  produced  by  1  &  1  in  response  to  that  order  (the  “MDCPC  Header  Information”). 

II.  Probable  Cause 

A.  Overview 

11.  The  United  States  Attorney’s  Office  forthe  Southern  District  ofNew  York  and  FBI  are 
investigating,  among  other  things,  a  scheme  by  Target  Subject  Michael  Cohen  to  defraud  multiple 
banks.  Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President 
Donald  Trump,  and  who  previously  served  for  over  a  decade  as  an  executive  in  the  Trump 
Organization,  an  international  conglomerate  with  real  estate  and  other  holdings. 

12.  The  investigation  has  revealed  that  Cohen  has  made  affirmative  misrepresentations  in 
and  omitted  material  information  from  financial  statements  and  other  disclosures  that  Cohen 
provided  to  multiple  banks  in  connection  with  a  transaction  intended  to  relieve  Cohen  of 
approximately  $22  million  in  debt  he  owed  on  taxi  medallion  loans  from  the  banks.  As  set  forth 
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in  detail  below,  in  these  financial  statements,  and  in  his  oral  and  other  written  statements  to  these 
banks,  Cohen  appears  to  have  (i)  intentionally  omitted  cash  assets  that  he  began  receiving  in  2017 
from  new  consulting  work;  (ii)  significantly  understated  his  total  holdings  of  cash  and  cash 
equivalents;  and  (iii)  failed  to  inform  the  banks  from  which  he  was  seeking  debt  relief  that  he  had 

I  in  connection  with 


agreed  to  make  a  $3.8  million  cash  payment  to  a  third  party, 

acquisition  of  the  taxi  medallions  securing  Cohen’s  debt.  By  making  these 
=^misrepresentati0ns--andrmateriaL:omissions^G0hen=av0ided=makingTrmojathly~payments=£)n-his__ 


l0ans,  and  attempted  t0  and  had  secured  proposed  agreements  from  the  banks  to  relieve  him  of 
certain  repayment  obligations  worth  millions  of  dollars. 

13.  Based  on  my  review  of  emails  obtained  from  the  Prior  Cohen  Account  Warrants, 
MDCPC  Header  Information,  and  documents  produced  pursuant  to  subpoenas,  I  have  learned  that 
Cohen  has  used  the  Cohen  Account  and/or  MDCPC  Account  to,  among  other  things,  (i) 

about  the  proposed  transfer  of  Cohen’s  medallions  and  associated  debts;  (ii)  negotiate  a  pay-down 
of  the  principal  amount  of  the  taxi  medallion  loans;  (iii)  communicate  with  his  accountant  about 
the  contents  of  the  false  financial  statements  at  issue;  and  (iv)  send  those  false  financial  statements 
to  Additionally,  the^^^^^^^^^| 

Accoun1^^^^^^^^^^|4ccount  and^^^tccount,  respectively,  to  communicate  with  Cohen 
about  the  status  of  the  taxi  medallion  transaction,  and  to  send  relevant  financial  statements  to 
banks.  Accordingly,  and  as  set  forth  in  more  detail  below,  there  is  probable  cause  to  believe  that 
the  Subject  Accounts  will  include  evidence  of  the  Subject  Offenses. 

B.  Cohen’s  Statements  to  Sterling  National  Bank 

14.  As  set  forth  in  detail  below,  in  2014,  Cohen,  through  limited  liability  corporations 
(“LLCs”)  controlled  by  him  and  his  wife,  Laura  Cohen,  entered  into  a  series  of  loans  from  Sterling 
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National  Bank  (“Sterling”)  and  the  Melrose  Credit  Union  (“Melrose”),  secured  by  taxi  medallions, 
for  approximately  $20  million.  Though  entered  into  by  LLCs,  the  loans  were  also  secured  by 
personal  guarantees  in  the  names  of  both  Cohen  and  his  wife.  Over  time,  as  the  taxi  industry 
weakened  and  the  medallions  were  devalued,  Cohen  sought  to  renegotiate  the  terms  of  those  loans 
and/or  relieve  himself  from  their  obligations,  including  the  personal  guarantees.  As  part  of  that 
effort,  Cohen  made  a  series  of  representations  to  Sterling  and  Melrose  about  his  net  worth,  assets. 


available^Gash,-and-finanGial-outlook.^SpecifiGally,-based-onmy-review-of  records  maintained-by 


Sterling  and  Melrose,  and  public  sources  concerning  the  taxi  industry  and  the  value  of  taxi 
medallions,  as  well  as  my  review  of  reports  prepared  by  law  enforcement  officers  of  interviews 
with  a  Sterling  executive  vice-president  (the  “Sterling  Employee-1”)  and  my  participation  in  an 
interview  with  a  Sterling  employee  (the  “Sterling  Employee-2”),  I  have  learned,  among  other 
things,  the  following: 

a.  Taxi  medallions  are  small  metal  plaques  affixed  to  taxis.  Without  a  medallion,  it 
is  illegal  to  operate  a  taxi  in  cities  with  medallion  systems,  such  as  New  York  City.  Cohen  and  his 
wife  own  multiple  LLCs  that  collectively  own  32  taxi  medallions  (each  LLC  owns  two 
medallions).^  Cohen’s  purchase  of  these  New  York  taxi  medallions  was  originally  financed  by 
loans  from  Capital  One  Bank,  for  which  the  medallions  served  as  collateral.  Cohen  was  not  a  taxi 
operator,  and  leased  his  medallions  to  a  third  party.  That  third  party  made  monthly  payments  to 
Cohen,  who  in  turn  used  some  of  those  proceeds  to  pay  his  monthly  loan  payments. 

b.  In  early  2014,  Cohen  became  a  customer  of  Sterling  when  he  sought  to  refinance  a 
mortgage  on  a  rental  property  that  he  owned.  In  or  around  April  2014,  Cohen  raised  with  Sterling 


^  One  of  these  companies.  Mad  Dog  Cab  Corp.,  was  jointly  owned  by  Sondra  Cohen,  who  I 
believe  is  Cohen’s  mother. 
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the  prospect  of  refinancing  his  taxi  medallion  loans,  which  were  then  at  Capital  One  Bank.  By  in 
or  about  September  2014,  Cohen  began  negotiating  a  lending  transaction  with  Sterling  that  would 
allow  Cohen  to  pay  off  his  loans  at  Capital  One  and  borrow  more  money  from  the  then-increase  in 
value  of  the  medallions.  According  to  Sterling  Employee-1,  in  2014,  prior  to  the  recent  upheaval 
in  the  taxi  industry — as  a  result  of  the  emergence  of  ride-sharing  services,  such  as  Uber — taxi 
medallion  loans  were  viewed  by  banks  and  investors  as  safe,  short  term  credits,  as  the  market  value 
ofitaxtmedallions:was:eonsistently~rising7“Consequently^taxi-medallion4oans=like:the-loans-held- 
by  Cohen — ^were  frequently  refinanced  at  increasing  amounts  as  the  value  of  the  medallions  rose. 
According  to  Sterling  Employee- 1 ,  borrowers  typically  cashed  out  the  increase  in  the  loan  amount 
and  used  the  additional  funds  for  other  purposes.  Cohen  appears  to  have  followed  this  approach  in 
2014,  when  he  agreed  to  refinance  his  medallion  loans  for  approximately  $22  million,  which — 
according  to  letters  from  Capital  One  Bank  in  Sterling’s  files — ^was  greater  than  his  previous  debt 
at  Capital  One  Bank  ($21  million,  of  which  $14.6  million  was  a  line  of  credit  to  Cohen).  This 
allowed  Cohen  to  cash  out  the  proceeds  from  the  transaction. 

c.  Based  on  my  review  of  records  maintained  by  Sterling,  I  have  learned  that  on  or 
about  December  8,  2014,  each  of  Cohen’s  sixteen  taxi  medallion  corporations  entered  into  loan 
agreements  and  promissory  notes  with  Sterling  for  the  principal  sum  of  $  1,375,000,  with  repayment 
due  on  December  8,  2016.  Each  loan  was  signed  by  Michael  or  Laura  Cohen,  depending  on  who 
was  the  sole  shareholder  of  the  corporation.  The  loans  were  also  each  secured  by  a  security 
agreement,  dated  the  same  day,  maldng  the  medallions  collateral  for  the  notes.  To  give  Sterling 
additional  security,  Michael  and  Laura  Cohen  signed  personal  guarantees  and  confessions  of 
judgment,  giving  Sterling  the  right  to  pursue  collection  against  the  Cohens’  personal  assets  were 
their  corporations  to  default  under  the  loan  agreements.  In  total.  Sterling  agreed  to  lend 
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approximately  $22  million  to  the  Cohens’  companies.  Pursuant  to  participation  agreements, 
Sterling  transferred  45  percent  of  that  debt  to  Melrose.^  Under  the  terms  of  Sterling’s  participation 
agreements  with  Melrose,  Sterling  was  precluded  from  amending  or  modifying  the  loans  without 
the  consent  of  Melrose. 

d.  In  evaluating  Cohen’s  requested  refinancing  of  the  taxi  medallions.  Sterling  (and 
Melrose,  consistent  with  its  participation  in  the  deal)  conducted  due  diligence.  At  Sterling’s 


requestfCohen=provided~Sterling-witlFa^statement-of=finanGiapGondition,~dated“August=tp2014 


(the  “August  2014  Finaneial  Statement”),  whieh  indieated  that  Cohen  had  $100,740,000  in  total 
assets,  $23,550,000  in  total  liabilities,  and  a  net  worth  of  $77,190,000.^  From  my  review  of  a 
Sterling  credit  memorandum,  dated  September  29,  2014,  I  loiow  that  Sterling  viewed  the 
transaction  favorably  because,  accounting  for  loan  payments,  cash  flows  from  the  medallions  were 
projected  to  be  positive,  the  value  of  the  collateral  (as  estimated  by  Sterling)  exceeded  $42  million, 
and  the  net  worth  of  Cohen — ^who  was  the  direct  obligor  under  the  guarantee  agreements — ^was 
over  $77  million.  An  internal  Sterling  credit  and  risk  rating  analysis  report,  dated  October  20, 
2014,  recommended  approval  of  the  loans  for  substantially  the  same  reasons. 

e.  Based  on  my  review  of  records  maintained  by  Sterling  and  public  sources,  I  have 
learned  that  overtime,  the  collateral  bacldng  Cohen’s  loans  (taxi  medallions)  lessened  in  value  due 
to  the  rise  in  ride-sharing  companies  and  significant  devaluation  of  taxi  medallions.  Additionally, 
Cohen  began  falling  behind  on  loan  payments  to  Sterling  and  Melrose.  I  know  from  records 
maintained  by  Sterling  and  an  interview  with  Sterling  Employee-2  that,  beginning  in  or  around 


^  Melrose,  which  had  a  business  principally  focused  on  taxi  medallion  loans,  is  now  in 
conservatorship  by  the  National  Credit  Union  Administration  (“NCUA”). 

^  Cohen  subsequently  provided  Sterling  with  a  revised  statement  of  financial  condition,  also 
dated  August  1,  2014,  which  reported  assets  of  $99,420,000,  total  liabilities  of  $23,550,000,  and  a 
net  worth  of  $75,870,000. 
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September  2015,  Cohen  told  Sterling,  in  sum  and  substance,  that  the  individual  leasing  Cohen’s 
medallions  had  fallen  behind  in  making  payments  to  Cohen,  and  that  as  a  result,  the  monthly  cash 
flow  from  his  taxi  medallions  had  been  reduced,  leaving  him  with  a  shortfall  of  approximately 
$16,000  each  month.  For  instance,  I  have  reviewed  an  email  from  Sterling  Employee-2,  dated 
September  9, 2015,  summarizing  a  call  with  Cohen — ^which  according  to  the  email  and  toll  records 
for  Cohen’s  cellphone  occurred  on  September  8,  2015 — during  which  Cohen  told  Sterling 
-Emplovee-2,-iELSuni,an(Lsuhstance,-about-his„casl]L-flow^problems_an(La„monthlv-shortfall_o£ 
approximately  $16,000.  In  that  same  email.  Sterling  Employee-2  commented  that  despite  Cohen’s 
statements,  his  personal  financial  information  “indicate[d]  a  strong  ability  to  make  up  the  difference 
in  payments.”  Cohen,  however,  according  to  Sterling  Employee-2,  pushed  the  bank  for  a  reduction 
in  Cohen’s  monthly  payments. 

f.  From  my  review  of  records  maintained  by  Sterling  and  my  participation  in  an 
interview  with  Sterling  Employee-2, 1  have  learned  that  Cohen  and  Sterling  Employee-2  spoke 
again  on  September  28,  2015,  and  that  during  the  call  Cohen  stated,  in  sum  and  substance,  that  the 
individual  to  whom  Cohen  leases  the  medallions  had  again  reduced  monthly  payments  to  Cohen.  I 
know  from  my  review  of  records  maintained  by  Sterling  that  between  in  or  about  September  2015 
and  November  2015,  Sterling  raised  the  possibility — ^both  internally  and  with  Cohen — of  Cohen 
posting  his  real  estate  holdings,  personal  residence,  or  some  other  collateral  as  additional  security 
for  the  banks.  According  to  these  records,  however,  Cohen  resisted  these  requests.  From  my  review 
of  loan  documents  and  records  maintained  by  Sterling,  I  Icnow  that  in  or  about  November  2015,  as 
a  result  of  Cohen’s  representation  that  he  was  not  earning  sufficient  returns  on  his  medallions  to 
cover  monthly  interest  payments.  Sterling  and  Melrose  agreed  to  amend  their  loans  with  Cohen  by. 
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among  other  things,  reducing  the  interest  rate  Cohen  paid  to  Melrose  and  extending  the  loan 
maturity  date  to  December  8,  2017. 

g.  I  know  from  interviews  with  Sterling  Employee- 1  and  Sterling  Employee-2,  as  well 
as  emails  I  have  reviewed,  that  in  or  about  October  2016,  Cohen  told  Sterling  Employee-1  that 
Cohen  had  a  potential  buyer  of  his  taxi  medallions,  named  would  agree  to 

assume  Cohen’s  debt  with  Sterling  and  Melrose.  Based  on  my  review  of  records  maintained  by 


=Sterlingpas'well=as"the~interviews~with~Sterling“Empl0yee=^Eand=Sterling^Employee=52-refereneed 


above,  I  know  that  by  or  before  October  2016,  Cohen  had  entered  into  negotiations  to  sell  his  sixteen 
corporate  taxi  medallions  to  who  is  a  medallion  owner  and  taxi  operator,  for  the 

balance  of  the  loans,  which  at  the  time  was  $21,376,000.  I  loiow  from  my  review  of  records 
maintained  by  Sterling,  and  my  participation  in  an  interview  with  Sterling  Employee-2,  that  as  a 
condition  of  the  transfer  of  the  medallion  loans — and  because  Sterling  was  unfamiliar  with 

Sterling  requested  that  Cohen  make  a  substantial  principal  payment  on  the  loan,  of 
approximately  one  million  dollars,  prior  to  the  transfer.  Cohen  rejected  this  request  initially.  But 
on  or  about  January  3 1 , 20 1 7,  Cohen  told  Sterling  Employee- 1 ,  in  sum  and  substance,  that  he  would 
make  a  one  million  dollar  principal  reduction  payment  in  order  to  move  forward  with  the  medallion 
transfer  deal  with  Indeed,  in  an  email  sent  from  the  Cohen  Account  to  Sterling 

Employee-2  on  or  about  February  22, 2017,  Cohen  confirmed  that  he  “agreed  to  pay  down  1  million 
from  the  loan  amount.” 

h.  Pursuant  to  the  participation  agreements  between  Sterling  and  Melrose,  Sterling 
was  required  to  secure  Melrose’s  agreement  to  participate  in  the  transfer  of  the  taxi  medallion  debt 
from  Cohen  On  or  about  April  17,  2017,  Sterling  sent  a  memorandum  to 

Melrose  summarizing  the  tenns  of  the  proposed  transaction,  and  noting  the  requirement  that 
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Melrose  agree  to  the  terms.  On  or  about  May  2,  2017, 


emailed  Sterling 


|\ccount  to  inquire  about  the  status  of  the  transaction. 


it  the 


|i  Account  that 
term  sheet 


Employee- 1  from  the 
Sterling  Employee-1  responded  tcj 

Melrose  had  agreed  to  the  deal,  and  that  Sterling  would  be  sending 
shortly. 

i.  In  order  for  the  banks  to  evaluate  the  proposed  transaction  fully,  they  requested 
-financial-information=from-the:parties7=©n-0raboUt=0ctobeji26p2G16j:a-Sterling-employee  emailed: 


the 


[Account  about  the  “Cohen  Medallion  Purchase,”  and  stated  “[i]n  order  to 


proceed  with  the  assumption  of  Michael’s  loans,”  Sterling  needed  certain  financial  information 

|i  responded  from  the^^^^^^^^^|4ccount,  copying 
|4ccount,  that  he  would  send  a  financial  statement  and  tax 
returns  shortly.  Additionally,  on  or  about  June  7,  2017,  Sterling  Employee-1  emailed  Cohen  to 
request  an  “updated  personal  financial  statement,”  completed  jointly  with  Cohen’s  wife,  and 
Cohen’s  most  recent  federal  income  tax  return.  On  or  about  June  8,2017,  Cohen  emailed  Sterling 
Employee- 1  from  the  Cohen  Account,  attaching  a  Sterling  personal  financial  statement  form  that 
had  been  filled  out  by  hand,  which  referenced  a  statement  of  financial  condition,  dated  May  1, 
2017  (the  “May  2017  Financial  Statement”),  that  was  also  attached.  The  May  2017  Financial 
Statement  included  a  cover  letter  from  Cohen’s  accountant,  Jeffrey  Getzel,  stating,  in  sum  and 
substance,  that  the  information  in  the  statement  came  from  Cohen  and  that  Getzel  had  not 
confirmed  its  accuracy  or  completeness.  The  May  2017  Financial  Statement  stated  that  Cohen  had 
total  assets  of  $41,955,000,  total  liabilities  of  $39,130,000,  and  a  net  worth  of  $2,825,000.  The 
May  2017  Financial  Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in 
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cash,  $26,155,000  in  closely  held  companies  (such  as  the  taxi  medallion  entities' and  his  real  estate 
holdings),  $3,200,000  in  real  estate  investments,  and  his  $1 1,000,000  personal  residence. 

j.  Based  on  my  review  of  reports  of  law  enforcement  interviews  of  Sterling 
Employee- 1, 1  have  learned  that  Sterling  Employee- 1  reviewed  each  line  of  the  May  2017  Financial 
Statement  with  Cohen  to,  among  other  things,  verify  its  accuracy,  and  Sterling  Employee- 1  asked 
Cohen  about  the  cash  amount  listed  on  the  May  2017  Financial  Statement.  Cohen  stated  to  Sterling 


-Employee=l^inrSumTand-substanGe5TAat-:therMayr20Jr7TEinanGiatStatement-was-aGGurate3- 


k.  On  or  about  August  16,  2017,  Sterling  Employee- 1  emailed  Cohen  at  the  Cohen 


Account  anJ 


lat  the! 


lAccount,  attaching  a  non-binding  term 


sheet  memorializing  the  potential  transaction  between  Sterling,  Melrose,  Cohen,  and 


On  or  about  August  29,  2017, 


smailed  Sterling  Employee-1  from  the 


and/or 


Account,  requesting  that  he  be  included  on  “all  future  e-mails 

concerning  this  matter,”  and  providing  proposed  edits  to  the  term  sheet.  On  or  about 
August  emailed  at  the 

Account,  Cohen  at  the  Cohen  Account,  and  ||||||||  at  the^^^J'^ccount,  and  provided  them  with  a 
revised  term  sheet.  On  or  about  September  5,  2017,  Sterling  Employee-1  sent^^^^^^^^^^l 


at  the 


^^^^^^^^^^■^ccount,  Cohen  at  the  Cohen  Account,  and| 
copy  of  the  executed  term  sheet.  According  to  the  term  sheet,® 

$20,000,000  from  Sterling  and  Melrose,  to  be  secured  by  the  medallions  that  | 
acquire  from  Cohen. 

1.  As  part  of  the  agreement,  accordingtotheterm  sheet,  $1,265,913  in  principal  (which 
is  what  would  remain  after  the  $20,000,000  payment  on  the  outstanding  loan  balance)  would  be 
repaid  by  Cohen  and  the  two  banlcs,  with  Cohen  paying  fifty  percent  and  the  banks  dividing  the 
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remaining  half  of  the  balance.  Based  on  my  review  of  an  internal  Sterling  credit  memorandum,  | 

dated  October  4, 2017,  the  parties  reached  a  preliminary  agreement  that  Cohen  would  pay  $632,956  i 

of  the  remaining  $1,265,912  principal  loan  balance,  and  Sterling  and  Melrose  would  absorb 
$357,167  and  $275,789  respectively  in  the  form  of  charge-offs.  According  to  Sterling  Employee- 
1,  Sterling  was  willing  to  divide  the  repayment  of  the  outstanding  principal  balance — despite  its 
prior  insistence  that  Cohen  make  a  principal  pay-down  of  at  least  one  million  dollars — because 

! 

H 

! 

'Cohen-represented  omadelephone-call  with  SterlingdEmployee-lyimsumand-substancGf  that  he^had- — — - --—i 

insufficient  liquidity  to  pay  the  full  outstanding  principal  balance.  As  part  of  the  agreement.  Sterling  j 

and  Melrose  also  agreed  to  relieve  Cohen  and  his  wife  of  the  personal  guarantees  that  they  made 
on  behalf  of  the  LLCs.  Thus,  after  completing  the  ^^^^^^xansaction,  Cohen  would  no  longer 
have  had  any  outstanding  obligations  to  Sterling  or  Melrose. 

m.  Based  on  my  review  of  emails  sent  by  Sterling  employees,  I  have  learned  that 
because  the  transaction  between  the  parties  was  subject  to  full  credit  underwriting  by  Sterling  and 
Melrose  (as  well  as  Melrose’s  regulators  at  NCUA),  in  August  and  September  2017,  Sterling 
required  and  requested  additional  financial  statements  for  Cohen  and^^^^^^^^or  its  credit 
underwriting  process.  In  response  to  Sterling’s  requests,  on  or  about  October  5,  2017,  ||||||m 
^^^^^^^ent  from  the  Account  to  a  Sterling  employee  a  copy  of 

personal  financial  statement.  The  financial  statement  lists  the 
Account  as  the  email  contact  Additionally,  on  or  about  October  5,  2017, 

Cohen,  using  the  Cohen  Account,  re-sent  Sterling  Employee-2  a  copy  of  his  May  2017  Financial 
Statement.  A  day  later,  on  October  6,  2017,  Cohen,  using  the  Cohen  Account,  emailed  Sterling 
Employee-2  a  statement  of  financial  condition,  dated  September  30,  2017  (the  “September  2017 
Financial  Statement”). 
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n.  Like  the  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
included  a  cover  letter  from  Jeffrey  Getzel,  Cohen’s  accountant,  stating,  in  sum  and  substance,  that 
the  information  in  the  statement  came  from  Cohen,  and  that  Getzel  had  not  confirmed  its  accuracy 
or  completeness.  The  September  2017  Financial  Statement  stated  that  Cohen  had  total  assets  of 
$33,430,000,  total  liabilities  of  $45,630,000,  and  a  negative  net  worth  of  $12,200,000.  Notably, 
unlike  Cohen’s  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
mepresented=t0“Sterling"that  Gohen=had“amegative:^neGworth^=The-September=201T~Einaneial- 


Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in  cash,  $17,630,000  in 
closely  held  companies  (such  as  the  taxi  medallion  entities  and  his  real  estate  holdings),^ 
$3,200,000  in  real  estate  investments,  and  his  $  1 1 ,000,000  personal  residence  (which,  for  the  first 
time,  he  indieated  was  held  in  trust).  The  September  2017  Finaneial  Statement  ineluded  assets  and 
liabilities  not  held  in  Cohen’s  name,  such  as  various  entities  assoeiated  with  his  taxi  medallions  and 
some  of  his  real  estate  investment  entities. 

o.  From  my  participation  in  an  interview  with  Sterling  Employee-2,  and  my  review  of 
reeords  maintained  by  Sterling,  1  have  also  learned  that  at  or  around  the  time  Cohen  provided 
Sterling  with  these  finaneial  statements — in  or  around  September  2017 — Cohen  stopped  paying 
monthly  loan  pajnnents  on  his  taxi  medallion  loans  altogether.  Aeeording  to  Sterling  Employee- 
2,  Cohen  informed  Sterling,  in  sum  and  substance,  that  he  had  insufficient  funds  to  pay  the  monthly 
prineipal  and  interest  payments  on  his  medallion  loans.  By  in  or  about  Deeember  2017,  Sterling 
and  Melrose  had  not  been  paid  approximately  $276,937.92  in  monthly  prineipal  and  interest 
payments  on  the  medallion  loans.  Based  on  Cohen’s  finaneial  condition  as  conveyed  in  the 


^Notably,  the  September  2017  Financial  Statement  valued  eaeh  of  Cohen’s  thirty-two  New 
York  taxi  medallions  at  approximately  $180,187.50,  whicj^wfl^cnnsiderably  less  than  the 
$650,000  valuation  ascribed  to  each  medallion  in  the  Coher^^^^^^|term  sheet. 
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September  2017  Financial  Statement,  and  his  delinquency  in  making  payments  to  Sterling,  among 
other  things,  the  bank’s  credit  underwriting  committee  determined  (and  memorialized  in  a 
December  2017  memorandum)  that  the  Coher^^^^^^Jtransaction  was  favorable  for  the  bank 
-  that  is,  tha^^^^^^^would  be  a  better  borrower  than  Cohen. 

p.  On  or  about  December  26,  2017,  Sterling  sent  Cohen  a  demand  letter  requesting 
the  immediate  receipt  of  past-due  loan  payments.  On  December  29,  2017,  Sterling  sent  Cohen  a 
letter  statingj:hat  he  was  in  jiefault  under  the  loans  jetween  Sterling  and  Coheir’s  medallion 

corporations.  Cohen  did  not  make  an  immediate  payment  on  the  loans,  but  instead  sent  an  e-mail 
to  Sterling  Employee-1  on  or  about  January  24, 20 1 8,  from  the  Cohen  Account,  stating  that  during 
the  closing  of  the  Cohen^^^^^^f.  transaction,  Cohen  would  “bring  all  payments  up  to  date  as 
well  as  deposit  the  payoff  differential.”  Cohen  also  requested  by  email  sent  from  the  Cohen 
Account  on  January  24,  2018,  that  at  the  closing  of  the  Cohen-’^^^^^^Jtransaction,  Sterling 
provide  a  letter  stating  that  all  of  Cohen’s  debts  have  been  satisfied  and  that  Cohen’s  personal 
guarantees  of  the  medallion  loans  had  been  terminated. 

q.  The  Coher^^^^^^|transaction,  however,  did  not  close.  On  or  about  January 
29,  2018^^^^the^^^^^^^|.ttomey,  emailed  attorneys  for  Sterling  from  the^^|\ccount 
and  stated  that  “at  this  time  there  is  no  deal  with  Michael  Cohen.  Some  of  the  numbers  have 
changed  and  we  are  not  prepared  to  go  forward.” 

r.  Based  on  my  participation  in  the  interview  with  Sterling  Employee-2  and  my 
review  of  records  maintained  by  Sterling,  I  Icnow  that  after  the  Cohen-^^^^^^|deal  fell  apart. 
Sterling  assigned  Cohen’s  loans  to  an  employee  at  Sterling  who  specializes  in  collecting  on 
defaulting  loans  (“Sterling  Employee-3”).  From  my  review  of  telephone  call  notes,  I  know  that 
Sterling  Employee-3  spoke  to  Cohen  on  or  about  January  30,  2018  about  paying  down  and/or 
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restructuring  Cohen’s  outstanding  taxi  medallion  loans.  Based  on  my  review  of  an  email  between 
Sterling  Employee-3  and  Cohen,  I  know  that  on  the  January  30,  2018  call,  Cohen  stated  that  he 
would  send  a  “corrected  current”  version  of  his  personal  financial  statement.  Following  that  call, 
on  or  about  January  31,  2018,  Cohen  emailed  Sterling  Employee-3  from  the  Cohen  Account  a 
copy  of  the  September  2017  Financial  Statement.  Later  that  day,  Cohen  again  emailed  Sterling 
Employee-3  from  the  Cohen  Account  and  proposed  paying  $500,000  to  bring  the  loans  current 
and-$7-5OjOOOtebring-the=prineipaldDalaneert0r$2Oj5OO^OOO;=:Gohemalsosuggested-revised*monthly- 


interest  payment  amounts.  On  or  about  January  31,  2018,  Sterling  Employee-3  responded  to 
Cohen  at  the  Cohen  Account  and  stated,  in  sum  and  substance,  that  Cohen  would  need  to  pay  the 
entirety  of  the  overdue  payments  and  pay  down  the  principal  balance  of  the  loan  to  $20,000,000 
(in  total,  apa)mientof  approximately  $1,750,000),  and  would  need  to  make  larger  monthly  interest 
payments. 


s.  On  or  about  February  1,2018,  Cohen  emailed  Sterling  Employee-3  from  the  Cohen 
Account  and  proposed  “[pjayment  of  $  1.250m  which  ALL  can  be  used  to  pay  down  principal,  if 
[Sterling]  will  waive  past  due  amounts,”  but  stated  “I  do  NOT  have  more  than  the  $L250m.” 
(Emphasis  in  original.)  Cohen  also  stated,  in  sum  and  substance,  that  he  had  insufficient  financial 
resources  to  post  additional  collateral  or  pre-fund  monthly  payments.  Based  on  my  participation 
in  an  interview  with  Sterling  Employee-2, 1  have  learned  that  Sterling  continues  to  renegotiate  the 
medallion  loans  with  Cohen  based  on  Cohen’s  representations  about  his  current  financial  position. 
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C.  Cohen  Made  Material  Misrepresentations  About  His  Finances  to  Banks 

Cohen  Concealed  from  Sterling  and  Melrose  Cash  Derived  from  Consulting  Work 

15.  As  set  forth  in  detail  below,  despite  multiple  representations  by  Cohen  to  Sterling  (and, 
by  extension,  Melrose^)  that  he  had  insufficient  funds  to  pay  down  the  principal  balance  of  the 
medallion  loans,  make  monthly  interest  payments,  or  pay  past-due  amounts,  it  appears  that 
between  2016  and  the  present,  Cohen  opened  and  maintained  bank  accounts  at  First  Republic  Bank 
(‘TjrstRepmblicIlVandlhen,receiyejdjmilliQnsj3fxlQllarsJn,pm]mQtledij~QPsultingp„aymentsJnJhes,e_ 
accounts,  which  he  did  not  disclose  to  Sterling.  Cohen  set  up  these  accounts  and  received  these 
funds  during  the  very  period  in  which  he  made  disclosures  to  Sterling  about  his  personal  finances 
(including  his  assets  and  liabilities)  and  his  ability  to  make  payments  on  the  medallion  loans.  In 
these  disclosures  to  Sterling — and  despite  being  asked  about  these  bank  accounts  by  his 
accountant — Cohen  withheld  information  about  liquid  financial  assets  at  First  Republic. 

16.  Specifically,  based  on  my  review  of  documents  and  bank  records  produced  pursuant  to 
a  subpoena  by  First  Republic,  and  my  participation  in  and  review  of  reports  of  interviews  with  two 
First  Republic  employees,  I  have  learned,  among  other  things,  the  following: 

a.  Cohen  and  his  wife  have  been  customers  of  First  Republic  since  approximately 
June  2011.  Cohen  controls  several  checking  and  loan  accounts,  some  in  his  own  name  and  others 
in  the  names  of  corporate  entities. 


^  Based  on  my  review  of  a  report  of  an  interview  conducted  with  an  employee  of  Melrose,  I 
have  learned  that,  pursuant  to  the  participation  agreement  between  Sterling  and  Melrose,  Cohen’s 
financial  statements  and  other  records  in  Sterling’s  possession  were  forwarded  to  Melms^c^hat 
Melrose  could  make  a  determination  as  to  whether  to  approve  of  the  Cohen-^^^^^^H 
transaction.  Based  on  my  review  of  reports  of  interviews  wj|j|J|g|j|||Hmployees,  1  also  Know 
that  Cohen  called  employees  at  Melrose  regarding  the  Cohen^^^^^^Bransaction. 
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b.  On  or  about  October  26,  2016,  in  Manhattan,  New  York,  Cohen  opened  a  new 
checking  account  at  First  Republic  in  the  name  of  Essential  Consultants  LLC  (the  “Essential 
Consultants  Account”).  Cohen  was  the  only  authorized  signatory  on  the  account.  When  Cohen 
opened  the  Essential  Consultants  Account,  a  First  Republic  employee  (“First  Republic  Employee- 
1”)  conducted  an  in-person  interview  of  Cohen.  In  response  to  a  series  of  know-your-customer 
questions^  about  the  purpose  of  the  account — ^the  answers  to  which  First  Republic  Employee-1 


-entered=into=a=formi==Cohen=stated,=in=sum”and=substanee,^-that=he^was=opening-Essential- 


Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting  work, 
and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States.  Cohen 
also  stated,  in  sum  and  substance,  that  his  purpose  in  setting  up  the  account  was  to  keep  the  revenue 
from  his  consulting  business — ^which  he  said  was  not  his  main  source  of  income — ^separate  from 
his  personal  finances.  As  set  forth  below,  there  is  probable  cause  to  believe  that  Cohen’s 
statements  about  the  intended  purpose  of  the  account  and  source  of  funds  for  the  account  were 
false.  Specifically,  the  account  was  not  intended  to  receive — ^and  does  not  appear  to  have 
received — ^money  in  connection  with  real  estate  consulting  work;  in  addition,  the  account  has 
received  substantial  payments  from  foreign  sources. 

c.  First,  on  or  about  October  27,  2016 — ^the  day  after  he  opened  the  Essential 
Consultants  Account,  Cohen  used  the  account  to  wire  $130,000  to  an  account  held  in  the  name  of 
attorney  Keith  Davidson’s  law  firm.  Based  on  my  review  of  emails  between  Cohen  and  Davidson, 


’  Certain  financial  institutions  are  required  to  conduct  such  procedures  pursuant  to  the  Bank 
Secrecy  Act  and  its  implementing  regulations.  See  31  U.S.C.  §  5318;  31  C.F.R.  §  1020.220. 

*  First  Republic  Bmployee-1  first  filled  out  the  form  on  the  day  he  interviewed  Cohen,  October 
26,  2016.  On  or  about  December  19,  2016,  at  the  request  of  bank  compliance  personnel.  First 
Republic  Employee-1  updated  the  form  to  add  more  detail  about  Cohen’s  statements. 
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obtained  pursuant  to  the  Prior  Cohen  Account  Warrants,  I  believe  that  this  payment  did  not  relate 
to  any  real  estate  consulting  work,  but  rather  was  a  “settlement”  payment  made  to  Davidson’s 
client.  ^  Based  on  my  review  of  public  sources,  I  have  learned  that  Davidson’s  client  is  alleged  to 
have  had  an  extramarital  affair  with  Donald  Trump.  On  or  about  February  13,  2018,  Cohen  made 
a  public  statement  that  “[i]n  a  private  transaction  in  2016,  I  used  my  own  personal  funds  to 
facilitate  a  payment  of  $130,000  to  [Davidson’s  client].” 

=:=r-rr=dT=::=Seeond^tknow:ftom:myrrevi©Wro£Eirst~RepubliG-bank~reGords;thatwere-SGheduled- 
by  an  FBI  forensiG  aGcountant  that  after  Cohen  opened  the  Essential  Consultants  Aoeount,  Cohen 
received  payments  into  that  account  from  foreign  businesses  and  entities  that  do  not  reflect  the 
stated  client  profile  for  the  residential  and  commercial  real -estate  consulting  services.  Specifically, 
from  my  review  of  the  Essential  Consultants  Account  schedule  and  public  sources,  I  know  the 
following: 

i.  Beginning  on  or  about  January  31,  2017,  Cohen  began  receiving  monthly 
payments  of  $83,333  from  an  entity  called  Columbus  Nova  EEC,  which  were  deposited  into  the 
Essential  Consultants  Account.  According  to  public  sources,  Columbus  Nova  is  an  investment 
management  firm  controlled  by  Renova  Group,  an  industrial  holding  company  based  in  Zurich, 
Switzerland  that  is  controlled  by  Russian  national  Viktor  Vekselberg.  From  January  2017  to 
August  2017,  the  Essential  Consultants  Account  received  seven  payments  totaling  $583,332.98 
from  Columbus  Nova  EEC. 

®  Specifically,  I  have  learned  from  my  review  of  banlc  records  that  on  or  about  October  26, 
2016,  Cohen  transferred  $131,000  from  a  home  equity  line  of  credit  account  at  First  Republic  to 
the  Essential  Consultants  Account;  on  or  about  October  27,  2016,  Cohen  transferred  $130,000 
from  the  Essential  Consultant  Account  to  an  account  held  in  the  name  of  Davidson’s  law  firm  at  a 
bank  based  in  Eos  Angeles;  and  on  or  about  November  1,  2016,  a  wire  transfer  in  the  amount  of 
approximately  $96,645  was  made  from  Davidson’s  account  to  a  bank  account  in  the  name  of 
Davidson’s  client. 
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ii.  Beginning  on  or  about  April  5,2017,  Cohen  began  receiving  payments  from 
Novartis  Investments,  SARL,  which  I  believe  to  be  the  in-house  financial  subsidiary  of  the  Swiss 
pharmaceutical  company  Novartis  International  AG  (“Novartis”).  Between  April  2017  and  January 
2018,  the  Essential  Consultants  Account  received  ten  wire  payments  from  a  Swiss  bank  account 
held  in  the  name  of  Novartis,  each  in  the  amount  of  $99,980,  for  a  total  of  $999,800. 

iii.  Beginning  in  or  about  April  2017,  the  Essential  Consultants  Account  started 
reeeivingwvrre=paymentsdfGm=a%anfc=aGcount=assoGiatedw?ith“theAeleeommuniGations-Gompany-“ 
AT&T  hiG.  (“AT&P’).  SpeGifiGally,  on  or  about  April  14,  2017,  AT&T  wired  $100,000  to  the 
Essential  Consultants  Aeeount  and,  from  in  or  about  June  2017  to  in  or  about  January  2018,  the 
Essential  Consultants  Aeeount  reeeived  nine  $50,000  payments  from  AT&T.  In  total,  AT&T  wired 
$550,000  to  the  Essential  Consultants  Aeeount. 

iv.  On  or  about  May  10,  2017,  June  9,  2017,  July  10,  2017,  and  November  27, 
2017,  the  Essential  Consultants  Aeeount  reeeived  four  deposits  in  the  amount  $150,000  (totaling 
$600,000)  from  a  bank  aeeount  in  South  Korea.  The  aoeount  holder  from  whieh  the  money  was 
sent  is  Korea  Aerospaee  Industries  Ltd.  (“KAI”).  KAI  is  a  South  Korea-based  eompany  that 
produees  and  sells  fixed-wing  aireraft,  helieopter  aireraft,  and  satellites  to  the  United  States 
Department  of  Defense,  among  other  eustomers. 

V.  On  or  about  May  22,  2017,  the  Essential  Consultants  Aeeount  reeeived  a 
$150,000  deposit  from  an  aeeount  at  Kazkommertsbanlc,  a  Kazakhstani  banlc.  The  listed  aeeount 
holder  at  Kazkommertsbank  was  a  seeond  Kazakhstani  bank  named  BTA  Bank,  AO.  A  message 
aecompanying  the  wire  payment  indieated  that  the  payment  was  a  “monthly  eonsulting  fee  as  per 
Inv  BTA-101  DD  May  10,  2017  eonsulting  agreement  W/N  DD  08  05  2017  CNTR  W/NDD 
08/05/2017.” 
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vi.  In  total,  from  on  or  about  January  31,  2017  to  on  or  about  January  10, 2018, 
the  Essential  Consultants  Account  received  approximately  $2,883,132.98  in  transfers  and  checks 
from  the  aforementioned  entities.  As  of  on  or  about  January  10,  2018,  the  balance  in  the  Essential 
Consultants  Account  was  $1,369,474.23. 

e.  On  or  about  April  4,  2017,  Cohen  opened  another  new  checking  account  at  First 
Republic,  this  one  in  the  name  of  Michael  D.  Cohen  &  Associates,  P.C.  (the  “MDC&A  Account”). 

=^^=C0hemwas=the^only=authorized-^signatory”on=the=:acGount^=-Among“OtherAhingsj=the-MDC&A:=^ 
Account  received  ten  wire  transfers  and  one  check  from  an  account  in  the  name  of  Squire  Patton 
Boggs,  a  law  firm.  In  total,  from  on  or  about  April  5,  2017,  to  on  or  about  January  2,  2018,  the 
MDC&A  Account  received  $426,097.70  in  deposits,  and  the  balance  in  the  account  as  of  January 
2,  2018,  was  $344,541.35.  As  discussed  below,  Cohen  never  disclosed  any  of  the  balance  in  the 
Essential  Consultants  or  MDC&A  accounts  to  Sterling  during  the  negotiations  with  respect  to  the 
•ansaction,  including  in  his  May  2017  Financial  Statement  and  September  2017 
Financial  Statement. 

17.  Based  on  my  review  of  emails  from  the  Cohen  Account  that  were  seized  pursuant  to 
the  Prior  Cohen  Account  Warrants,  and  my  review  of  reports  of  interviews  with  employees  of 
AT&T  and  Novartis,  it  appears  that  the  aforementioned  payments  to  the  Essential  Consultants 
Account  and  MDC&A  Account  ostensibly  were  for  political  consulting  work,  including  consulting 
for  international  clients  on  issues  pending  before  the  Trump  administration.  Specifically,  from 
my  review  of  emails  from  the  Cohen  Account  and  public  sources,  I  have  learned  the  following: 


Based  on  my  review  of  public  sources,  I  have  learned  that  Cohen  is  not  registered  as  a 
lobbyist  or  as  a  person  acting  as  an  agent  of  foreign  principals,  as  may  have  been  required  by  the 
Foreign  Agents  Registration  Act. 
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a.  On  or  about  April  28,  2017,  Cohen  sent  an  email  from  the  Cohen  Account  to  an 
individual  whom  I  believe  is  affiliated  with  KAI.  In  the  email,  Cohen  attached  a  document 
purporting  to  be  a  “Consulting  Agreement”  between  KAI  and  Essential  Consultants  dated  as  of 
about  May  1,  2017.  The  document  indicates  that  Essential  Consultants  would  render  “consulting 
and  advisory  services,  as  requested”  by  KAI,  and  that  KAI  would  pay  Essential  Consultants  “a 
consulting  fee  of  One  Million  Two  Hundred  Thousand  ($1,200,000.00)  US  Dollars,”  disbursed 
through-eight-:$T505Q004nstallm6ntSzbetweemMay~2015-andrDgeembeE=2QT7-:========^^ 

b.  On  or  about  May  10,  2017,  Cohen  sent  an  email  from  an  alternate  email  address, 
copjdng  the  Cohen  Account,  to  an  employee  of  BTA  Bank.  To  the  email,  Cohen  attached  an 
invoice  to  BTA  Bank  in  the  name  of  Essential  Consultants.  The  invoice  contemplated  a  $150,000 
payment  to  Essential  Consultants  for  a  “monthly  consulting  fee.” 

c.  On  or  about  February  1 3, 20 1 7,  Cohen  emailed  an  AT&T  employee  from  the  Cohen 
Account  what  appears  to  be  a  consulting  agreement,  which  contemplates  that  Essential  Consultants 
“shall  render  consulting  and  advisory  services  to  [AT&T]”  and  that  AT&T  would  “advise  [Essential 
Consultants]  of  those  issues  and  matters  with  respect  to  which  AT&T  Services  desires  [Essential 
Consultants] ’s  assistance  and  advice.”  The  contract  calls  for  AT&T  “to  pay  the  Consultant  for  his 
services  ...  a  consulting  fee  of  Fifty  Thousand  ($50,000)  Dollars  .  .  .  per  month.”  Based  on  my 
review  of  reports  of  interviews  with  AT&T  employees,  I  have  learned  that  AT&T  retained  Cohen 
to  consult  on  political  issues,  including  net  neutrality,  the  merger  between  AT&T  and  Time  Warner, 
and  tax  reform. 


d.  On  or  about  January  17,  2017,  Cohen  emailed  to  a  representative  of  Novartis  from 
the  Cohen  Account  a  contract  between  Novartis  and  Essential  Consultants,  which  provides  that 
Essential  Consultants  will  “provide  consulting  and  advisory  services  to  Novartis  on  matters  that 
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relate  to  the  repeal  and  replacement  of  the  Affordable  Care  Act  in  the  US  and  any  other  issues 
mutually  agreeable  to  [Essential  Consultants]  and  Novartis.”  The  contract  provides  for  a 
“consulting  fee  of  One  Million  Two  Hundred  Thousand  ($1,200,000)  US  dollars,”  to  be  paid  to 
Essential  Consultants  in  even  monthly  installments  over  the  course  of  a  year.  Based  on  my  review 
of  reports  of  interviews  with  Novartis  employees,  I  have  learned  that  Novartis  retained  Cohen  to 
provide  political  consulting  services  and  to  gain  access  to  relevant  policymakers  in  the  Trump 
-AdHiinistratiQnF=====^— •  - —  --  - - - 


e.  On  or  about  April  3,  2017,  Squire  Patton  Boggs,  a  law  firm,  announced  on  its 
website  that  is  had  formed  a  “strategic  alliance”  with  Michael  D.  Cohen  &  Associates  and  would 
“jointly  represent  clients.” 

18.  Despite  the  significant  amount  of  money  that  Cohen  received  into  the  Essential 
Consultants  Account  and  the  MDC&A  Account,  and  the  cash  balance  in  both  accounts,  Cohen  did 
not  disclose  that  information  to  Sterling  or  Melrose.  Specifically,  based  on  my  review  of  documents 
by  Getzel,  my  notes  1 

have  learned  the  following: 

a.  In  or  about  May  2017,  Getzel  met  with  Cohen  at  a  law  firm  in  Manhattan,  New 
York.  At  the  meeting,  Cohen  told  Getzel,  in  sum  and  substance,  that  he  had  set  up  a  law  practice 
called  Michael  D.  Cohen  &  Associates  P.C.,  and  a  consulting  company  called  Essential  Consultants 
LLC.  Cohen  told  Getzel,  in  sum  and  substance,  that  he  expected  to  earn  $75,000  per  month  in 
connection  with  his  law  practice,  and  that  he  expected  gross  revenues  for  the  consulting  business  to 
be  between  five  and  six  million  dollars  annually. 

b.  In  or  about  October  2017,  if  not  earlier,  Getzel  was  preparing  a  personal  financial 
statement  for  Cohen.  On  or  about  October  6,  2017,  Getzel  sent  an  email  to  Cohen  at  the  Cohen 
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Account  in  which  Getzel  wrote  that  “[a]ttached  is  a  draft  of  the  newPFS  as  of  September  30, 2017” 
and  attached  a  draft  of  the  September  2017  Financial  Statement.  The  draft  statement  reflected  that 
as  of  September  30,  2017,  Cohen  had  only  $1,250,000  in  cash,  total  assets  of  approximately 
$33,430,000  (comprised  of  taxi  medallion  interests,  real  estate  interests,  and  his  personal  residence 
and  property),  and  liabilities  of  approximately  $45,630,000,  leaving  him  purportedly  over  $12 
million  in  debt.  In  the  same  email,  Getzel  questioned  Cohen,  in  sum  and  substance,  about  the  fact 


ThaCthe=fmanGiaFstatemenftdid=not'list  any  assets=assoGiated-with"either  the-EssentiahConsultants 


AGGOunt  or  the  MDC&A  Aoeount:  “[w]e  did  not  add  any  value  for  you[r]  two  operating  entities  - 
Miehael  D.  Cohen  &  Assoeiates  POC  [5/c]  and  Essential  Consultants  EEC.  Please  advise  whether 
or  not  these  should  be  diselosed  and  what  value.” 

G.  On  or  about  Ootober  6, 2017,  Cohen  Galled  Getzel  by  telephone — ^whioh  is  refleoted 
on  toll  reGords  for  Cohen’s  eellphone — and  told  Getzel,  in  sum  and  substanoe,  not  to  inelude 
Essential  Consultants  or  MDC&A  in  the  September  2017  Finanoial  Statement  beoause  they  had  no 
value. 

d.  On  or  about  Ootober  6, 20 1 7,  following  the  eall  with  Getzel,  Cohen,  using  the  Cohen 
AoGOunt,  responded  to  Getzel’s  email  with  the  answer  “[IJooks  good  to  me.”  Cohen  never  direeted 
Getzel  to  make  any  ehanges  to  his  eash  position  as  listed  in  the  September  2017  Finanoial 
Statement.  Neither  Essential  Consultants  nor  MDC&A  was  listed  on  the  September  2017  Finanoial 
Statement  that  was  provided  to  Sterling. 

19.  Based  on  the  foregoing,  and  from  my  review  of  bank  reoords  and  emails  sent  by  Cohen 
to  Sterling,  I  know  that  the  September  2017  Finanoial  Statement  made  no  mention  whatsoever  of 
assets  that  Cohen  held  in  the  Essential  Consultants  Aoeount  or  the  MDC&A  Aoeount.  As  of 
September  30,  2017^ — the  date  of  the  September  2017  Finanoial  Statement — Cohen  had 
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approximately  $673,729.95  in  the  Essential  Consultants  Account  and  $248,619.28  in  the  MDC&A 
Account.  As  of  October  6, 2017,  the  date  when  Getzel  asked  Cohen  about  the  two  accounts,  Cohen 
had  approximately  $823,709.95  in  the  Essential  Consultants  Accoimt  and  $248,619.28  in  the 
MDC&A  Account. 

Cohen  Understated  His  Available  Cash 

20.  In  addition  to  withholding  the  existence  of  the  Essential  Consultants  Account  and  the 

MD-C&A-AccountJfom-Sterling-ancLMelrose,.itappears_thatjCohemalso_substantialLwunderstated _ 

his  available  cash  and  cash  equivalents  in  his  financial  disclosures.  Specifically,  I  know  from  my 
review  of  the  September  2017  Financial  Statement  that  Cohen  provided  to  Sterling  that  Cohen 
represented  that  he  had  $1,250,000  in  cash  as  of  September  30,  2017.  But,  from  my  review  of  a 
summary  of  bank  records  that  were  scheduled  by  an  FBI  forensic  accountant,  I  have  learned  that 
Cohen  had  over  $5,000,000  in  cash  and  cash  equivalents  as  of  September  30,  2017.  Specifically, 
from  my  review  of  the  account  schedule  and  banlc  records,  I  have  learned  the  following: 

a.  Cohen  has  three  checking  and/or  savings  accounts  at  Capital  One  Bank,  one  of 
which  is  in  his  wife’s  name.  As  of  September  30,  2017,  Cohen  had  $1,105,680.35  in  his  savings 
account,  and  $1,262,982.29  in  total  in  the  three  accounts  at  Capital  One  Bank. 

b.  Cohen  has  three  accounts  at  Morgan  Stanley  in  his  name.  As  of  September  30, 
2017,  the  combined  total  in  cash  and  cash  equivalents  in  those  three  accounts  was  $1,270,600.41. 

c.  As  of  September  30, 2017,  Cohen  had  $260,689.18  in  an  account  at  Signature  Bank. 

d.  In  addition  to  the  Essential  Consultants  Account  and  MDC&A  Account  at  First 
Republic,  Cohen  also  had  two  joint  checking  accounts  with  Laura  Cohen  at  First  Republic.  In  total, 
as  of  September  30,  2017,  Cohen  had  at  least  $1,876,209.27  in  total  in  his  four  accounts  at  First 
Republic. 


02.28:2018 


28 


Case  l:18-cr-00602-WHP  Document  48-4  Filed  07/18/19  Page  64  of  105 


e.  Cohen  has  an  account  at  Bethpage  Credit  Union  with  $25,931.39  in  it  as  of 
September  30, 2017. 

f.  As  of  September  30, 2017,  Cohen  had  $17,542.54  in  accounts  at  Sterling. 

g.  Cohen  has  two  accounts  at  TD  Bank — one  in  his  name  and  one  held  jointly  with  his 
wife — ^and  the  total  balance  across  the  two  accounts  as  of  September  30,  2017  was  $300,096.72. 

h.  In  total,  as  of  September  30, 2017,  Cohen  had  at  least  $5,014,051.80  in  his  accounts 
aUCapitaUOne-Banfc^Signature  Bank^  TD=Bank7=Bethpage=Gredit-Unionp:EirsURepubliep:and= 
Morgan  Stanley. 

2 1 .  Accordingly,  based  on  the  foregoing,  it  appears  that  Cohen’s  representations  to  Sterling 
and  Melrose  that  he  did  not  have  more  than  $1,250,000  were  false,  and  that  Cohen  withheld 
information  regarding  approximately  $5  million  in  funds  from  Sterling  and  Melrose  in  order  to 
secure  favorable  terms  in  his  renegotiation  of  his  medallion  loan.  Based  on  my  participation  in  an 
interview  with  Sterling  Employee-2,  and  my  review  of  reports  of  interviews  with  Sterling 
Employee-1  and  two  Melrose  employees,  it  is  my  understanding  that  that  Sterling  and  Melrose 
would  view  Cohen’s  understating  of  his  assets  as  material  to  its  decision  whether  to  renegotiate 
Cohen’s  medallion  loans  and  on  what  terms,  or  approve  of  the  transfer  of  those  loans  to 


Cohen  Had  a  Side  Agreement  With 


22.  As  set  forth  in  detail  below,  it  appears  that  during  the  course  of  Cohen’s  negotiations  to 


sell  his  interest  in  taxi  medallions  and  the  associated  debt  to 


Cohen  not  only 


misrepresented  his  financial  position  to  Sterling,  but  also  failed  to  disclose  a  side  deal  he  had 


negotiated  with 


it  appears  that 


agreed  to  pay  an  above-market  price  for 


Cohen’s  taxi  cab  medallions,  and  in  exchange,  Cohen  agreed  to  pay 


pproximately 
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$3.8  million  in  cash.  Specifically,  from  my  review  of  documents  produced  pursuant  to  a  subpoena 
by  Sterling,  and  reports  prepared  by  law  enforcement  officers  of  interviews  with  Sterling 
Employee-1,  as  well  as  my  participation  in  an  interview  with  Sterling  Employee-2, 1  have  learned, 
among  other  things,  the  following: 

a.  On  or  about  September  5,  2017,  an  executed  term  sheet  was  circulated  by  Sterling 
Employee-1  to  Cohen  and^^^^^^  See  supra  14(k).  According  to  the  term  sheet, 
^^^^^^Bvould=^borFow#205OO0=OOO€rom-Sterling  and=Melrose=to-be  securedEy-the^medallions 
that  ^^^^^^|vas  to  acquire  from  Cohen.  At  a  price  of  $20  million  for  thirty-two  taxi  medallions, 
the  proposed  transaction  valued  each  medallion  as  worth  $625,000.  The  term  sheet  also 
contemplated  a  $1,265,913  pay-down  of  the  principal  balance  of  the  loan.  The  term  sheet  made  no 
mention  of  a  $3.8  million  payment  from  Cohen  to  ^^^^^|or  any  other  form  of  payment  or 
financial  transaction  between  the  parties. 

b.  Additionally,  an  internal  Sterling  credit  memorandum,  dated  October  4,  2017, 

describing  the  terms  of  the  Cohen-''^^^^^Ptransaction  and  the  new  loan  to  ^^^^^^^^|did 
not  mention  any  payments  from  Cohen  to  including  a  $3.8  million  payment.  The 

memorandum  also  noted  that  the  “loan  amount  of  $20MM  indicates  a  $625M  purchase  price  per 
medallion”  but  “it  is  recognized  that  this  is  not  in  line  with  current  market  values.”  Indeed, 
according  to  an  internal  Sterling  memorandum  dated  February  5,  2018,  in  the  month  of  January 
2018,  taxi  medallions  sold  for  amounts  ranging  from  $120,000  to  $372,000.  According  to  Sterling 
Employee-1  and  Sterling  Employee-2,  they  were  never  told  that^^^^^^  agreed  to  a  purchase 
price  of  $625,000  in  exchange  for  a  lump  sum  payment  from  Cohen,  or  that  Cohen  would  make 
any  payment  to 
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23.  While  Cohen  did  not  disclose  any  payment  from  Cohen  to 

^H|||m[in  communications  with  Sterling,  it  appears  that  such  a  payment  was  contemplated. 
Indeed,  based  on  my  review  of  records  maintained  by  Getzel,  and  a  report  prepared  by  law 
enforcement  agents  of  an  interview  with  Getzel,  I  have  learned  the  following,  in  substance  and  in 
part,  regarding  the  proposed  side-payment  from  Cohen  to 

a.  On  or  about  September  19,  2017,  Getzel  prepared  a  memorandum  for  Cohen 
entitled7=^Sale-ofrN¥C=Medallion=Entities=and=]Debt-Assumption^(the=Getzel-Memorandum^);:^ 
The  Getzel  Memorandum  summarized  the  proposed  transaction  between  Cohen  and||||^^|^^| 
in  part,  as  follows;  “Michael  and  Laura  Cohen  will  transfer  ownership  of  their  13  NYC  medallion 
entities  to  a  Buyer  who  will  assume  their  bank  indebtedness,  upon  the  [Cohens’]  paying  down  the 
debt  portfolio  of  the  13  entities  by  $500,000  and  a  cash  payment  to  the  Buyer  of  $3,800,000.”^^ 

b.  According  to  Getzel,  Cohen  told  him  the  parameters  of  the  deal,  including  the 

payment  of  $3,800,000  to  but  Getzel  did  not  know  where  Cohen  was  goitig  to  obtain 

$3,800,000  to  As  noted  above,  Cohen  had  more  than  $5,000,000  in  cash  and 

cash  equivalents  as  of  September  2017,  but  had  only  disclosed  in  his  September  2017  Financial 
Statement  that  he  had  $1 .25  million  in  cash. 

24.  Based  on  my  review  of  records  maintained  by  Sterling  (as  well  as  Melrose,  the  bank 
with  the  participating  interest  in  the  loans)  and  repoits  of  interviews  of  representatives  of  Sterling 
(and  Melrose),  I  have  seen  no  evidence  that  Sterling,  Melrose,  or  any  other  financial  institution 
involved  in  the  potential  deal  with  Cohen  and  ^^^^^^|was  aware  of  the  planned  $3.8  million 
side  payment  from  Cohen  to 


The  reference  to  thirteen  medallions  appears  to  be  an  error  by  Getzel.  Cohen  and  his  wife 
together  owned  sixteen  corporations,  which  in  turn  owned  32  taxi  medallions. 
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D.  Probable  Cause  Regarding  the  Subject  Accounts 

25.  As  set  forth  above,  since  at  least  September  20 1 5,  if  not  earlier,  Cohen  has  told  Sterling 
that  he  has  difficulty  making  payments  on  his  medallion  loans  and,  since  at  least  October  2016, 
Cohen  has  been  actively  engaged  in  an  attempt  to  sell  his  taxi  medallions  and  the  associated  debts 
In  the  course  of  doing  so,  Cohen  has  used  the  Cohen  Account  and/or  MDCPC 
Account  to  engage  in  email  communications  regarding  the  terms  of  the  transactions  and  the 


-undisclosed— side-payment -with| 

lit  the^^^^^^l 


.at— the 


|\ccount,  and ' 


Account,_^^^B 
Account.  Specifically, 


as  described  above,  there  is  probable  cause  to  believe  that  the  Subject  Accounts  have  been  used 
regarding  the  proposed  Cohen^^^^^^Jtransaction  with  Sterling: 

a.  Cohen  has  used  the  Cohen  Account  to,  among  other  things,  negotiate  a  pay-down 
of  the  principal  amount  of  the  loan,  see  supra  Tf  14(g),  to  send  teim  sheets  to  Sterling,  see  supra  f 
140),  to  communicate  with  his  accountant  about  the  contents  of  financial  statements,  see  supra  Tf 
16,  to  send  financial  statements  to  Sterling,  see  supra  Tf  14(i),  (1),  to  check  on  the  status  of  the 
transaction  as  of  January  24,  2018,  see  supra  Tf  14(n),  to  negotiate  a  reduction  of  his  debt  with 
Sterling  on  or  around  January  31,  2018,  see  supra  Tf  14(o),  to  tell  Sterling  on  February  1,  2018,  he 
does  not  have  the  ability  to  pay  more  than  $1,250,000,  see  supra  ^  14(p),  and  to  communicate  with 
individuals  responsible  for  soui'ces  of  pa)ments  to  the  Essential  Consultants  Account,  see  supra  f 
15.  In  other  words,  from  the  communications  described  above,  it  appears  likely  that  the  Cohen 
Account  will  contain  recent  evidence  of  the  Subject  Offenses,  including  conummications  and 
potential  misrepresentations  to  Sterling,  and  evidence  indicating  that  statements  made  to  Sterling 
are  false  or  misleading. 


b. 


I  has  used  the 


Ikccount  to  communicate  about 


the  proposed  taxi  medallion  transaction  with  Cohen,  which  appears  to  have  been  discussed  as  early 
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as  October  2016.  See  supra  T]  14(g).  Specifically,  as  described  above,  as  early  as  May  2,  2017, 
lused  Account  to  inquire  about  the  status  of  the  transaction, 

see  supra  T|  14(h).  He  used  the  ^^^^^^^^^^HAccount  to  exchange  drafts  of  the  proposed  term 


sheet  with  Cohen, 
used  by  J 


see  supra  T|  14(1).  Th(l 


[and  Sterling,  see  supra  ^  14(j).  The  I 
to  send  a  personal  financial  statement  foil 

Account  was  copied  on  emails  from  the 


Account  was  also 
to  Sterling, 


=^=A:ecount=ab0ufrthe=;transaction^-s'uu=j'Mj9ra=^“14(i)i^and  wasHisted'on-^^^^^^^^^financiaf 
statement  as  the  contact  email  supra  14(m).  Additionally,  based  on  my 

review  of  MDCPC  Header  Information,  I  Icnow  that  on  or  about  September  1,  2017 — at  or  around 
the  time  the^^^^^^l  and  Cohen  were  negotiating  a  term  sheet-^^^^^^^^^^^sed  the 
^^^^^^^^^^^Vccount  to  send  and  receive  eight  emails  from  Cohen  at  the  MDCPC  Account. 

c.  ^^^|aas  used  the^^^|i.ccount  to  communicate  with  Sterling  employees,  Cohen, 
and^^^^^^^^^|ibout  the  proposed  taxi  medallion  transaction  since  at  least  December  2016. 
See  supra  TfH  14(g),  24(c).  Specifically,  on  or  about  August  29,  2017(^^^|old  Sterling  that  he 
should  be  included  on  “all  future  e-mails”  involving  the  proposed  transaction,  see  supra  Tf  14(j). 
Additionally,  ^^^|vas  involved  in  making  revisions  to  the  parties’  term  sheets,  and  he  told 
Sterling  on  January  29,  2018  that^^J^^^^^rould  not  go  forward  with  the  planned  transaction, 
see  supra  Tf  14(j),  (n).  Accordingly,  there  is  probable  cause  to  believe  that  the  ^^^Account  will 
contain  evidence  of  the  negotiations  between  Sterling  and  the  parties,  evidence  of  a  pa)nnent  from 
Cohen  and  the  reasons  for  the  collapse  of  the  Cohen-^^^^^Htransaction. 


12 

2016.1 


For  instance,  from  records  provided  by  Sterling,  I  know  that  on  or  about  December  2, 


Isent  an  email  to  a  Sterling  emplovee^ing  the 


Account.  The  email  forwarded  correspondence  between^B 
Account,  and  an  employee  of  Capital  One  regarding  extending] 
Capital  One. 


ban  with 
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26.  Additionally,  it  appears  that  Cohen  set  up  the  MDCPC  Account  to  receive  emails  he 
.  was  previously  receiving  at  the  Cohen  Account.  Specifically,  based  on  my  review  of  records 
maintained  by  AT&T,  I  have  learned  that  on  or  about  May  5,  2017,  Cohen  sent  an  email  from  the 
MDCPC  Account  to  a  blind  copy  list  of  recipients  stating  that  “[d]ue  to  the  overwhelming  volume 
of  phone  calls  and  emails  coming  into  my  previous  cellular  number  and  e-mail  address,  I  have 
elected  to  create  for  Clients  Only  the  following.  Kindly  use  this  new  information  for  all  future 

=eontacfandu3ommuni6ations#Mhe  signaturedine  on  the-email=listed=‘‘Essential  ConsultantsdsTC^ 
and  “Michael  D.  Cohen  &  Associates,  PC,”  as  well  as  the  MDCPC  Account  as  the  email  address.^^ 

27.  In  addition,  based  on  my  review  of  emails  from  the  MDCPC  Account  produced 
pursuant  to  the  Prior  Cohen  Account  Warrants  and  the  MDCPC  Header  Information,  I  have  learned 
that  Cohen  has  used  the  MDCPC  Account  to  send  and  receive  emails  from  the  Cohen  Account,  to 
communicate  with  the^^^|\ccount,  and  to  send  and  receive  emails  from  other  email  accounts 
about  his  political  consulting  business.  Additionally,  from  my  review  of  the  MDCPC  Header 
Information,  it  appears  that  since  the  November  13,  2017  search  warrant  on  the  MDCPC  Account, 
Cohen  has  continued  to  send  and  receive  emails  at  the  MDCPC  Account  that  appear  likely  to  be 
relevant  to  the  commission  of  the  Subject  Offenses.  For  example,  emails  obtained  pursuant  to  the 
Prior  Cohen  Account  Warrants,  as  well  as  the  MDCPC  Header  Information  have  revealed  the 
following: 

a.  On  approximately  eight  occasions  in  August  and  September  2017,  while  Cohen, 
ere  communicating  about  a  term  sheet  for  the  Cohen-^^^^^^Htaxi 


Based  on  my  review  of  emails  from  the  MDCPC  Account  obtained  pursuant  to  subpoena,  I 
have  learned  that  Cohen  has  used  the  account  to  communicate  with  numerous  individuals  with 
whom  he  does  not  enjoy  an  attorney-client  privilege,  including  some  of  the  individuals  described 
below.  See  infra  Tf  27. 
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medallion  t'ansaction,  see  supra  14(k),  Cohen  used  the  MDCPC  Accoimt  to  send  or  receive 
emails  fron^^^^at  the^^^Jkccount.  For  instance,  on  or  about  August  22,  2017,^^|ased 
the^^^l^ccount  to  send  an  email  to  Sterling  Employee- 1  and  copied  Cohen  on  the  email  at  the 
MDCPC  Account.  On  the  same  day,  Sterling  Employee- 1  responded  the 

and  Cohen  at  the  MDCPC  Account.  On  or  about  August  22,  2017,  Cohen  also  used  the  MDCPC 
Account  to  send  an  email  to  Sterling  Employee- 1 . 

======^~b7":^s=^nT5ted“ahGvey"omorabout‘September4y=201#yCohenmsedhhedV[DCPG  Account- 

to  send  or  receive  eight  emails  with  the  j^^^^^^^^^kccount. 

c.  Cohen  used  the  MDCPC  Account  to  send  and  receive  emails  from  individuals  who 
work  at  companies  with  whom  it  appears  Cohen  has  a  political  consulting  agreement.  For 
example,  beginning  in  April  2017 — ^the  same  month  when  Cohen  began  receiving  payments  from 
AT&T,  see  supra  16(d),  17(c) — Cohen  used  the  MDCPC  Account  to  send  and  receive  emails 
from  AT&T  employees.  These  emails  contain,  among  other  things,  invoices  from  Cohen  to  AT&T 
for  consulting  work  by  Cohen.  Similarly,  beginning  in  April  2017 — ^which  is  also  the  month 
Cohen  began  receiving  payments  from  Novartis  for  consulting  work,  see  supra  16(d),  17(d) — 
Cohen  used  the  MDCPC  Account  to  send  and  receive  emails  from  employees  of  Novartis.  These 
emails  concern,  among  other  things,  invoices  from  Cohen  and  requests  for  Novartis  for  Cohen’s 
assistance  on  an  initiative  relating  to  drug  pricing. 

d.  From  my  review  of  the  MDCPC  Header  Infonuation,  I  have  learned  that  Cohen  has 
continued  to  use  the  MDCPC  Account  to  send  and  receive  emails  from  individuals  who  work  at 
companies  with  whom  it  appears  Cohen  had  a  political  consulting  agreement,  such  as  Novartis  and 
AT&T.  For  instance,  on  approximately  six  occasions  between  November  28,  2017  and  January 
30,  2018,  the  MDCPC  Account  was  used  to  send  and  receive  emails  from  accounts  belonging  to 
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I 

I 

individuals  using  @att.com  email  addresses.  Similarly,  on  approximately  seventeen  occasions 
between  December  1,  2017  and  February  20,  2018,  the  MDCPC  Account  was  used  to  send  and 
receive  emails  from  accounts  belonging  to  individuals  using  @novartis.com  email  addresses. 

Since  November  1 5, 201 7,  the  MDCPC  Account  has  also  sent  and  received  emails  with  individuals  J 

using  the  email  domains  @bta.kz,  which  I  believe  is  the  email  domain  used  by  employees  of  BTA  | 

Bank,  see  supra  1 6(d),  1 7(b),  and  @squirepb.com,  which  I  believe  is  the  email  domain  used  by 

employees  of  the  law  firm  Squire  Patton  Boggs — ^both  of  which  Cohen  appears  to  have  a _ | 

consulting  relationship  with,  see  supra  16(e),  17(e).  Accordingly,  it  appears  that  Cohen 

continues  to  use  the  MDCPC  Account  to  send  and  receive  emails  that  will  be  relevant  to  whether 

\  1 

he  is  maintaining  a  consulting  business,  what  type  of  consulting  work  he  is  doing,  and  whether  he 
is  receiving  money  for  that  consulting  work. 

28.  In  addition  to  the  foregoing,  based  on  my  review  of  the  Pen  Register  Data,  see  supra  ^ 

9,  it  appears  that  since  the  date  of  the  last  search  warrant  on  the  Cohen  Account  (i.e.,  November 
13,  2017),  Cohen  has  continued  to  use  the  Cohen  Account  to  communicate  with  the 

Account,  the^^|A.ccount,  and  other  email  accounts  that  appear  likely  to  be  relevant 
to  the  commission  of  the  Subject  Offenses  described  above.  For  example,  the  Pen  Register  Data 
has  revealed  the  following: 

a.  Emails  sent  by  the  Cohen  Account  to  the  ^^Jj^ccount  on  or  about  December  1 8, 

2017  at  8:26  p.m.,  December  21,  2017  at  9:35  p.m.,  December  22,  2017  at  4:32  p.m.,  January  3, 

2018  at  8:01  a.m.,  January  3,  2018  at  2:56  p.m.,  and  January  4,  2018  at  3:31  p.m. 

b.  An  email  sent  by  the  Cohen  Account  to  Account  on  or  about 

January  25,  2018  at  8:55  p.m. 
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c.  Emails  from  the  Cohen  Account  to  the  email  account on  or 
about  December  1,  2017  at  2:14  p.m.,  December  29,  2017  at  10:20  p.m.,  January  2,  2018  at  3:52 
p.m.,  January  2,  2018  at  5:44  p.m.,  and  January  8,  2018  at  6:38  p.m.  Based  upon  my  review  of 

email  account 


emails  contained  in  the  Cohen  Account,  I  have  learned  that 
belongs  to  Jeffrey  Getzel,  Cohen’s  accountant,  through  whom  Cohen  made  misrepresentations  to 
financial  institutions,  as  discussed  above. 


^i^^^^^^^^'dr^EmaifeffomFthe'CohenAceeonnttD^emailaeeounts^belonging^to^Sterlingemployeesf 
including  Sterling  Employee-1,  on  or  about  January  25,  2018  at  10:23  p.m.,  January  26,  2018  at 
12:55  a.m.,  January  29, 2018  at  5:30  p.m.,  January  29,  2018  at  8:29  p.m.,  January  30, 2018  at  6:44 


p.m. 


e.  An  email  sent  from  the  Cohen  Account  to  the  email  account 
clientserviceny@firstrepublic.com  on  or  about  January  25,  2018  at  5:29  p.m.  As  stated  above. 
First  Republic  is  the  bank  at  which  the  Essential  Consultants  Account  is  held. 

f.  Numerous  emails  sent  from  the  Cohen  Account  to  the  email  account 

including  emails  on  or  about  December  4,  20 1 7  at  2: 1 7  p.m.  and  January  29, 
20 1 8  at  5 :43  p.m.  Based  upon  the  email  address  and  domain  name,  as  well  as  my  review  of  reports 
of  interviews  and  documents  reflecting  that  Cohen’s  taxi  medallions  were  leased  and  operated  by 


1 1  believe  that  the 


I  email  address  belongs  to 


29.  Based  on  my  review  of  records  maintained  by  Sterling,  1  know  that  Cohen  used  the 
Cohen  Account  to  send  and  receive  documents  related  to  the  Cohen-|^^^^^|  transaction. 
Based  on  my  training  and  experience,  I  Icnow  that  Google  allows  users  of  e-mail  accounts  to  easily 
save  documents  to  file  sharing  and  retention  platforms  such  as  Google  Docs  and  Google  Drive.  I 
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also  know,  from  my  training  and  experience,  that  users  of  e-mail  accounts  often  use  instant 
messaging  interfaces  linked  to  their  email  accounts.  Further,  I  have  learned  that  the  Providers 
maintain  records  of  search  and  web  histories  associated  with  email  accounts  and,  based  on  my 
training  and  experience,  users  of  e-mail  accounts  use  associated  web  search  browsers  associated 
with  a  subscriber’s  account  to  research  topics  they  are  e-mailing  about.  Accordingly,  there  is 
probable  cause  to  believe  that  content  information  associated  with  the  Subject  Accounts  will  also 

^^ntain  evidmeerelated  to^the  Subjei;F©ffensesr^“  -  -  - - ~  —  - - - 

30.  Thus,  I  respectfully  submit  that  there  is  probable  cause  to  believe  that  emails  and  other 
content  information  from  the  Subject  Accounts  will  contain  evidence  of  Cohen’s  efforts  to  sell  his 
taxi  medallions  and  the  associated  debt,  and  his  misrepresentations  and  omissions  to  Sterling  and 
Melrose  in  connection  with  these  negotiations.  Although  Cohen  appears  to  have  communicated 
with^^^^^^^^^^^^^^^^^^^^^^^^^^^^|primarily  the 

MDCPC  Account,  I  Imow,  based  on  my  involvement  in  the  investigation,  that  Cohen  also  used  at 
least  one  other  email  account  associated  with  his  position  at  the  Trump  Organization.  Thus,  I 
respectfully  submit  that  there  is  probable  cause  to  believe  that  emails  and  other  content  information 
from  thjmiH^m^ccount,  ^^^^^^^^^^Account  and^^^A.ccount  or 

about  October  1,  2016 — ^the  approximate  date  of  when  Cohen’s  efforts  to  sell  his  taxi  medallions 
and  the  associated  debt  began — ^will  reflect  communications  with  the  Cohen  Account,  MDCPC 
Account,  and  possibly  one  or  more  additional  accounts  used  by  Cohen,  and  probable  cause  to 
believe  that  such  emails  will  constitute  evidence  of  Cohen’s  commission  of  the  Subject  Offenses, 
including  the  extent  to  which  Cohen  did  or  did  not  inform  other  individuals  involved  in  the  conduct 
above — 

omissions  to  financial  institutions. 
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31.  Temporal  Limitation.  This  application  seeks  all  emails  and  other  requested  content 
information  specified  in  Attachments  A,  B,  C,  and  D  for  the  following  periods: 

a.  For  the  Cohen  Account,  this  application  seeks  all  emails  sent,  created,  or  received 
between  November  14, 2017,  and  the  date  of  the  proposed  warrant,  inclusive.  As  described  above, 
pursuant  to  the  Prior  Cohen  Account  Warrants,  the  SCO  obtained  and  provided  to  the  USAO 
emails  from  the  Cohen  Account  that  were  sent,  created,  or  received  before  November  14,  2017. 


'This="application~alsG^seeks^other-infonnatrGn=speGified=above=assoGiated=witfrthe-CGhen=AGGGunt 


that  was  created  between  December  1,  2014  (the  mnnth  when  Cnhen  entered  intG  the  medallinn 
leans  with  Sterling),  and  the  date  ef  the  preposed  warrant,  inclusive. 

b.  Fur  the  MDCPC  Acceunt,  this  applicatien  seeks  all  emails  sent,  created,  nr  received 
between  Nevember  14, 2017,  and  the  date  ef  the  preposed  warrant,  inclusive.  As  described  abeve, 
pursuant  te  a  prier  warrant,  the  SCO  obtained  and  provided  to  the  USAO  emails  from  the  MDCPC 
Account  that  were  sent,  created,  or  received  before  November  14,  2017. 

For  the^^^^^^^^l  Account  and  ^^^^^^^^^^Account, 
seeks  emails  and  all  other  content  information  specified  above  sent,  created,  or  received  between 
October  1,  2016,  and  the  date  of  the  proposed  warrant,  inclusive.  As  described  above,  October 
2016  is  the  month  in  which  Cohen  began  negotiating  the  taxi  medallion  sale  with  the 

d.  For  the  ^^^^Account,  this  application  seeks  emails  and  all  other  content 
information  specified  above  sent,  created,  or  received  between  December  1,  2016,  and  the  date  of 
the  proposed  warrant,  inclusive.  As  described  above,  December  2016  is  the  month  in  which^^H 
began  representing  the^^^^^^^fon  relation  to  the  taxi  medallion  transaction. 

E.  Evidence,  Fruits  and  Instrumentalities 

32.  Based  upon  the  foregoing,  1  respectfully  submit  there  is  probable  cause  to  believe  that 
information  stored  on  Google’s  servers  associated  with  the  Cohen  Account  will  contain  evidence. 
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fruits,  and  instrumentalities  of  violations  of  the  Subject  Offenses,  as  more  fully  described  in 
Section  II  of  Attachment  A  to  the  proposed  warrant  for  the  Cohen  Account  and  MDCPC  Account, 
including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  the  person(s)  who  created  or  used  the  Cohen  Account  or  MDCPC  Account. 

b.  Communications,  records,  documents,  and  other  files  involving  Sterling,  Melrose, 


and/or-taxtmedaUions^ 


c.  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or 

agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions, 
and  any  associated  debts  or  liabilities,  to  others,  including  to  and/or  entities 

associated  with  him; 

d.  Communications,  records,  documents,  and  other  files  involving  Essential 
Consultants,  LLC  or  Michael  D.  Cohen  &  Associates,  including  those  which  indicate  the  nature 
and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  Michael  D.  Cohen  & 
Associates; 


e.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  —  who 
communicated  with  the  Cohen  Account  and/or  MDCPC  Account  about  any  matters  relating  to 
Essential  Consultants,  LLC,  or  about  any  plan  or  proposal  or  agreement  for  Cohen  and/or  entities 
associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 


liabilities,  to  others,  including  to 


Imd/or  entities  associated  with  him; 


f.  Communications  between  the  Cohen  Account  and/or  MDCPC  Account  and  Jeffrey 
Getzel  relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 
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g.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan 
at  that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution; 

h.  Evidence  indicating  how  and  when  the  Cohen  Account  and  MDCPC  Account  was 

:z3r3:=r:::=:^accessGdor-used;=tO'determine4he^geographic^and=chr0nologicaEcontext-ofiaccount-access^usejpr=-r:=^ 

and  events  relating  to  the  crimes  under  investigation  and  to  the  account  owner;  and 

i.  Evidence  indicating  the  Cohen  Account  and  MDCPC  Account  owner’s  intent  as  if 
relates  to  the  Subject  Offenses  under  investigation. 

33.  Based  upon  the  foregoing,  I  further  submit  there  is  probable  cause  to  believe  that 
information  stored  on  Google’s  servers  associated  with  Account  and 

HHIIIIIIIIIIIIIIIlAccount  will  contain  evidence,  fruits,  and  instrumentalities  of  violations  of  the  Subject 
Offenses,  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 

identity  of  the  person(s)  who  th^^^^^^^^^^|fccount  and|||||^|||||||^^ 

Account; 

b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal 
or  agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  tc^^^^^^^^^|and/or  entities  associated 
with  him; 

c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 
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communicated  with  the^^^^^^^^^^^Account  and  ||^^^^^^^^^|Account  about  any 
matters  relating  to  any  plan  or  proposal  or  agreement.for  Cohen  and/or  entities  associated  with  him 
to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or  liabilities,  to 
and/or  entities  associated  with  him; 

d.  Communications  between  the  Account  and^^^^^^^ 

Account  and  others,  including  employees  or  representatives  of  Sterling,  Melrose,  or  other  financial 

T=rijnstitution(s)fregarding:Coheri^sd3nances;= — - ^ 

e.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan 
at  that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution; 

f.  Evidence  indicating  how  and  when  the 

^^^^^^^Account  were  accessed  or  used,  to  determine  the  geographic  and  chronological  context 
of  account  access,  use,  and  events  relating  to  the  crimes  under  investigation  and  to  the  account 
owner; 

g.  Evidence  indicating  the|^^^^|^^^^|tccount  and 
owners’  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

34.  Based  upon  the  foregoing,  I  further  submit  there  is  probable  cause  to  believe  that 
information  stored  on  Oath’s  servers  associated  with  the  ^^^Account  will  contain  evidence, 
fruits,  and  instrumentalities  of  violations  of  the  Subject  Offenses,  including  the  following; 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  the  person(s)  who  created  or  used  the^^^J'^ccount; 


Account  and 
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b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal 
or  agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  ;^^^^^^^^^|ind/or  entities  associated 
with  him; 

c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 

=eommuniGated^with^the^^J^CGOunt^abouCany^matters^relating=:to=anyr:planr0r=proposatoE=: 

agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions, 
and  any  associated  debts  or  liabilities,  t(|||||||||||||||||||^^  entities  associated  with  him; 

d.  Communications  between  the  ^^J^ccount  and  others,  including  employees  or 
representatives  of  Sterling,  Melrose,  or  other  financial  institution(s),  regarding  Cohen’s  finances; 
and 

e.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution. 

ni.  Review  of  the  Information  Obtained  Pursuant  to  the  Warrant 

35.  Pursuant  to  18  U.S.C.  §  2703(g),  the  presence  of  a  law  enforcement  officer  is  not 
required  for  service  of  a  search  warrant  issued  under  §  2703,  or  for  the  collection  or  production  of 
responsive  records.  Accordingly,  the  warrant  requested  herein  will  be  transmitted  to  the  Providers, 
which  shall  be  directed  to  produce  a  digital  copy  of  any  responsive  records  to  law  enforcement 
personnel  within  30  days  from  the  date  of  service.  Law  enforcement  personnel  (including,  in 
addition  to  law  enforcement  officers  and  agents,  and  depending  on  the  nature  of  the  ESI  and  the 
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status  of  the  investigation  and  related  proceedings,  attorneys  for  the  government,  attorney  support 
staff,  agency  personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts 
under  government  control)  will  retain  the  records  and  review  them  for  evidence,  fruits,  and 
instrumentalities  of  the  Subject  Offenses  as  specified  in  Section  III  of  Attachments  A,  B  and  C  to 
the  proposed  warrant. 

36.  In  conducting  this  review,  law  enforcement  personnel  may  use  various  methods  to 


4oGatemvidenGepfruitsfand-instramentalities-ofethe-Subjeefc0ffenses5-ineluding-butrn0trlimiteddo_ 


undertaking  a  cursory  inspection  of  all  emails  within  the  Subject  Account.  This  method  is 
analogous  to  cursorily  inspecting  all  the  files  in  a  file  cabinet  in  an  office  to  determine  which  paper 
evidence  is  subject  to  seizure.  Although  law  enforcement  personnel  may  use  other  methods  as 
well,  particularly  including  keyword  searches,  I  know  that  keyword  searches  and  similar  methods 
are  typically  inadequate  to  detect  all  information  subject  to  seizure.  As  an  initial  matter,  keyword 
searches  work  only  for  text  data,  yet  many  types  of  files  commonly  associated  with  emails, 
including  attachments  such  as  scanned  documents,  pictures,  and  videos,  do  not  store  data  as 
searchable  text.  Moreover,  even  as  to  text  data,  keyword  searches  cannot  be  relied  upon  to  capture 
all  relevant  communications  in  an  account,  as  it  is  impossible  to  know  in  advance  all  of  the  unique 
words  or  phrases  that  investigative  subjects  will  use  in  their  communications,  and  consequently 
there  are  often  many  communications  in  an  account  that  are  relevant  to  an  investigation  but  that 
do  not  contain  any  keywords  that  an  agent  is  likely  to  search  for. 

37.  Because  Cohen  and^^^are  attorneys,  the  review  of  the  content  within  the  Subject 
Accounts  will  be  conducted  pursuant  to  established  screening  procedures  to  ensure  that  the  law 
enforcement  personnel  involved  in  the  investigation,  including  attorneys  for  the  Government, 
collect  evidence  in  a  manner  reasonably  designed  to  protect  any  attorney-client  or  other  applicable 
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privilege.  When  appropriate,  the  procedures  will  include  use  of  a  designated  “filter  team,”  separate 
and  apart  from  the  investigative  team,  in  order  to  review  potentially  privileged  communications 
and  determine  which  communications  to  release  to  the  investigation  and  prosecution  team. 

IV.  Request  for  Non-Disclosure  and  Sealing  Order 

38.  The  existence  and  scope  of  this  ongoing  criminal  investigation  are  not  publicly  known. 
As  a  result,  premature  public  disclosure  of  this  affidavit  or  the  requested  warrants  could  alert 

Gohen-that-rheAsmnderAnvestigationjrGausing:rhimAo-destroy-evidence,-flee^Jcom-pjrasej;ution,^r_. 


otherwise  seriously  jeopardize  the  investigation.  In  particular,  based  on  my  experience 
investigating  white  collar  cases,  including  cases  featuring  documents  such  as  agreements,  drafts 
of  agreements,  notes  of  conversations,  and  other  documentary  evidence,  premature  disclosure  of 
an  investigation  may  cause  the  target  of  the  investigation  to  attempt  to  destroy  or  conceal  such 
evidence.  In  addition,  as  also  set  forth  above,  Cohen  uses  computers  and  electronic 
communications  in  furtherance  of  his  activity  and  thus  could  easily  delete,  encrypt,  or  otherwise 
conceal  such  digital  evidence  from  law  enforcement  were  he  to  learn  of  the  Govemmenf  s 
investigation.  See  18  U.S.C.  §  2705(b)(3).  Cohen  also  appears  to  have  the  financial  means  that 
would  facilitate  his  flight  from  prosecution.  See  1 8  U.S.C.  §  2705(b)(2),  (5). 

39.  Accordingly,  there  is  reason  to  believe  that,  were  the  Providers  to  notify  the  subscriber 
or  others  of  the  existence  of  the  warrant,  the  investigation  would  be  seriously  jeopardized. 
Pursuant  to  1 8  U.S.C.  §  2705 (b),  I  therefore  respectfully  request  that  the  Court  direct  the  Providers 
not  to  notify  any  person  of  the  existence  of  the  warrant  for  a  period  of  180  days  from  issuance, 
subject  to  extension  upon  application  to  the  Court,  if  necessary. 

40.  For  similar  reasons,  I  respectfully  request  that  this  affidavit  and  all  papers  submitted 
herewith  be  maintained  under  seal  until  the  Court  orders  otherwise,  except  that  the  Government 
be  pei-mitted  without  further  order  of  this  Court  to  provide  copies  of  the  warrant  and  affidavit  as 
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need  be  to  personnel  assisting  it  in  the  investigation  and  prosecution  of  this  matter,  and  to  disclose 
those  materials  as  necessary  to  comply  with  discovery  and  disclosure  obligations  in  any 
prosecutions  related  to  this  matter. 

V.  Conclusion 

41.  Based  on  the  foregoing,  I  respectfully  request  that  the  Court  issue  the  warrants  sought 
herein  pursuant  to  the  applicable  provisions  of  the  Stored  Communications  Act,  18  U.S.C. 
-  §-2-703  (b)(-b)(A)-(for-cQntents)and-§-27-03(c)(l-)(AX(for-r-ecords-and-otherJnfonnationX-an(lthe- 
relevant  provisions  of  Federal  Rule  of  Criminal  Procedure  41. 


Special  Agent  Mason  Posilkin 
United  States  Attorney’s  OfBce 
Southern  District  of  New  York 


Sworn  to  before  me  this 
28th  day  of  February,  2018 


HONORABLE  GABRIEL  W.  GORENSTEIN 
Chief  United  States  Magistrate  Judge 
Southern  District  of  New  York 
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UNITED  STATES  DISTO.ICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 
Associated  with  the  Email  Accounts 
l^gmail.com, 

II 

|i,  Maintained  at 
Premises  Controlled  by  Google,  Inc., 
USAO  Reference  No.  20I8R00127 


Search  Warrant  and  Non-Disclosure  Order 

TO:  Google,  Inc.  (“Provider”) 

United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  the  Federal 
■  Bureau  of  Investigation  (collectively,  the  “Investigative  Agencies”) 

1.  Warrant.  Upon  an  affidavit  of  Special  Agen^^^^^^^^^^of  the  United  States 
Attorney’s  Office  for  the  Southern  District  of  New  York,  and  pursuant  to  the  provisions  of  the 
Stored  Communications  Act,  18  U.S.C.  §  2703(b)(1)(A)  and  §  2703(c)(1)(A),  and  the  relevant 
provisions  of  Federal  Rule  of  Criminal  Procedure  41,  the  Court  hereby  finds  there  is  probable 
cause  to  believe  the  email  accounts  ^^^^^|@gmail.com^^^^^gmail.com,  and 

maintained  at  premises  controlled  by  Google,  Inc.,  contain  evidence, 
fruits,  and  instrumentalities  of  crime,  all  as  specified  in  Attachments  A  and  B  hereto.  Accordingly, 
the  Provider  is  hereby  directed  to  provide  to  the  Investigative  Agencies,  within  7  days  of  the  date 
of  service  of  this  Warrant  and  Order,  the  records  specified  in  Section  II  of  Attachments  A  and  B 
hereto,  for  subsequent  review  by  law  enforcement  personnel  as  authorized  in  Sections  III  and  IV 
of  Attachments  A  and  B.  The  Government  is  required  to  serve  a  copy  of  this  Warrant  and  Order 
on  the  Provider  within  7  days  of  the  date  of  issuance.  The  Warrant  and  Order  may  be  seiwed  via 
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electronic  transmission  or  any  other  means  through  which  the  Provider  is  capable  of  accepting 
service. 


2.  Non-Disclosure  Order.  Pursuant  to  18  U.S.C.  §  2705(b),  the  Court  finds  that  there  is 
reason  to  believe  that  notification  of  the  existence  of  this  warrant  will  result  in  destruction  of  or 
tampering  with  evidence  or  flight  from  prosecution,  or  otherwise  will  seriously  jeopardize  an 
ongoing  investigation.  Accordingly,  it  is  hereby  ordered  that  the  Provider  shall  not  disclose  the 


-  existence^GfithisA¥arranfiand^©rder:  :to::thedisted=subseribe&or  to -anyr  otheEpersomfoETa^rperiod-of:. 


180  days  from  the  date  of  this  Order,  subject  to  extension  upon  application  to  the  Court  if 
necessary,  except  that  Provider  may  disclose  this  Warrant  and  Order  to  an  attorney  for  Provider 
for  the  purpose  of  receiving  legal  advice. 

3.  Sealing.  It  is  further  ordered  that  this  Warrant  and  Order,  and  the  Affidavit  upon  which 
it  was  issued,  be  filed  under  seal,  except  that  the  Government  may  without  further  order  of  this 
Court  serve  the  Warrant  and  Order  on  the  Provider;  provide  copies  of  the  Affidavit  or  Warrant  and 
Order  as  need  be  to  personnel  assisting  the  Government  in  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure 
obligations  in  any  prosecutions  related  to  this  matter. 

Dated:  New  York,  New  York 


Date  Issued 


Time  Issued 


HONORABLE  GABRIEL  W.  GORENSTEIH 
Chief  United  States  Magistrate  Judge 
Southern  District  of  New  York 
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Email  Search  Attachment  A 
L  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  Google,  Inc.  (the  “Provider”),  headquartered  at  1600 
Amphitheatre  Parkway,  Mountain  View,  California  94043,  and  applies  to  all  content  and  other 
information  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email  account 
l@gmail.com  (the  “Subject  Account”)  for  the  time  period  referenced  below. 

A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another 


appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  If  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  III  below, 
n.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Account: 

a.  Email  content.  All  emails  sent  to  or  from,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Account,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email) 
limited  to  items  sent,  received,  or  created  between  November  14, 2017  and  the  date  of  this  warrant, 
inclusive. 


b.  Address  book  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Account. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Account,  including  but  not  limited  to  name,  username,  addi'ess,  telephone 
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number,  alternate  email  addresses,  registration  IP  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Account, 
including  any  IP  logs  or  other  records  of  session  times  and  durations,  limited  to  items  sent, 
received,  or  created  between  December  1,  2014  and  the  date  of  this  warrant,  inclusive. 

e.  Customer  correspondence.  All  correspondence  with  the  subscriber  or  others  associated 
with-the^Subjeet-Aeeormtpineluding  complaints, -inquiries^otother-eontaets^with-supportserviees- 


and  records  of  actions  taken,  limited  to  items  sent,  received,  or  created  between  December  1,  2014 
and  the  date  of  this  warrant,  inclusive. 

f.  Search  History.  All  search  history  and/or  web  history  associated  with  the  Subject 
Account,  limited  to  items  sent,  received,  or  created  between  December  1, 2014  and  the  date  of  this 
warrant,  inclusive. 

g.  Associated  content.  All  Google  Docs,  files  maintained  on  Google  Drive,  and  instant 
messages  or  Gchats  associated  with  the  Subject  Account,  limited  to  items  sent,  received,  or  created 
between  December  1, 2014  and  the  date  of  this  warrant,  inclusive. 

h.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  18 
U.S.C.  §  2703(f)  or  otherwise. 

TTT.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
and  instrumentalities  ofviolations  of  18  U.S.C.  §§  371  (conspiracy  to  commit  offense  or  to  defraud 
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I 


the  United  States),  1005  (false  banlc  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (banlc  fraud),  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Account; 

b.  Communications,  records,  documents,  and  other  files  involving  Sterling  National 
Bank,  Melrose  Credit  Union,  and/or  taxi  medallions; 

CGmmuniGati0ns=recordspdocumentspand=other=filesfinvolving-a=^planF^proposaVor^—  = 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  others,  including  t(|^^^^^^^^^|and/or 
entities  associated  with  him; 

d.  Communications,  records,  documents,  and  other  files  involving  Essential  Consultants, 

LLC  or  Michael  D.  Cohen  &  Associates,  including  those  which  indicate  the  nature  and  purpose  of 
payments  made  to  or  from  Essential  Consultants  or  Michael  D.  Cohen  &  Associates; 

e.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  any  person(s)  —  including  records  that  reveal  the  whereabouts  of  the  person(s)  —  who 
communicated  with  the  Subject  Account  about  any  matters  relating  to  Essential  Consultants,  LLC, 
or  about  any  plan  or  proposal  or  agreement  for  Michael  D.  Cohen  and/or  entities  associated  with 
him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or  liabilities,  to  others, 
including  t(^^^^^^^^^|md/or  entities  associated  with  him; 

f.  Communications  between  the  Subject  Account  and  Jeffrey  Getzel  relating  to  Michael 
D.  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 

g.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
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institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 

h.  Evidence  indicating  how  and  when  the  Subject  Account  was  accessed  or  used,  to 
determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner;  and 

r— — :i:;=rEvidenee=indieatingAhe-Subjeet-Aeeount-=ewner=S-^intent-as3-it-relates=to=the~Subjeet— 

Offenses  under  investigation. 

IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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Email  Search  Attachment  B 

I.  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  Google,  Inc.  (the  “Provider”),  headquartered  at  1600 
Amphitheatre  Parkway,  Mountain  View,  California  94043,  and  applies  to  all  content  and  other 
information  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email 
account!^^^|@gmail.com  and  “Subject  Accormts”)  for  the  time 

-period-betweemQctober-l,-2016-and-the-date^o£this^warrant,_incIusive._ _  _ - 

A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another 
appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  II  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  III  below. 

II.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Accounts: 

a.  Email  content.  All  emails  sent  to  or  from,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Accounts,  including  all  message  content,  attachments,  and  header 
mformation  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email). 

b.  Address  book  information.  All  address  book,  contact  list,  or  similar  mformation 
associated  with  the  Subject  Accounts. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Accounts,  including  but  not  limited  to  name,  username,  address,  telephone 
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number,  alternate  email  addresses,  registration  IP  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  pa)mient,  and  payment  history. 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Accounts, 
including  any  IP  logs  or  other  records  of  session  times  and  durations. 

e.  Customer  correspondence.  All  correspondence  with  the  subscriber  or  others  associated 
with  the  Subject  Accounts,  including  complaints,  inquiries,  or  other  contacts  with  support  services 

="aiid  records=tyf^etimis^takeirF=~  - - -  - — =r=T- —  - 

f.  Search  History.  All  search  history  and/or  web  history  associated  with  the  Subject 
Accounts. 

g.  Associated  content.  All  Google  Docs,  files  maintained  on  Google  Drive,  and  instant 
messages  or  Gchats  associated  with  the  Subject  Accounts. 

h.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  1 8 
U.S.C.  §  2703(f)  or  otherwise. 

III.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
and  instrumentalities  of  violations  of  1 8  U.S.C.  §§371  (conspiracy  to  commit  offense  or  to  defraud 
the  United  States),  1005  (false  banlc  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (bank  fraud),  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Accounts; 
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b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal  or 

agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  and/or  entities  associated 

with  him; 

c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 
"communieated“with=the-SubjeGtv4eeounts=abouCanyTnatters-relating~to  any=plan-or-proposahor=^ 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  tc^^^^^^^^^^^and/or  entities  associated 
with  him; 

d.  Communications  between  the  Subject  Accounts  and  others,  including  employees  or 
representatives  of  Sterling  National  Banlc,  Melrose  Credit  Union,  or  other  financial  institution(s), 
regarding  Michael  D.  Cohen’s  finances; 

e.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 

f.  Evidence  indicating  how  and  when  the  Subject  Accounts  was  accessed  or  used,  to 
determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner; 

g.  Evidence  indicating  the  Subject  Accounts  owners’  intent  as  it  relates  to  the  Subject 
Offenses  under  investigation. 
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IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 
Associated  with  the  Email  Account 
^^|@aol.com,  Maintained  at 
Premises  Controlled  by  Oath,  Inc., 
US  AO  Reference  No.  2018R00127 


Search  Warrant  and  Non-Disclosure  Order 


TO:  Oath,  Inc.  (“Provider”) 

United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  the  Federal 

Bureau  of  Investigation  (collectively,  the  “Investigative  Agencies”)  . 

1.  Warrant.  Upon  an  affidavit  of  Special  Agent  |||||||||||||||||||||||^  of  the  United  States 
Attorney’s  Office  for  the  Southern  District  of  New  York,  and  pursuant  to  the  provisions  of  the 
Stored  Communications  Act,  18  U.S.C.  §  2703(b)(1)(A)  and  §  2703(c)(1)(A),  and  the  relevant 
provisions  of  Federal  Rule  of  Criminal  Procedure  41,  the  Court  hereby  finds  there  is  probable 
cause  to  believe  the  email  account^^J@aol.com,  maintained  at  premises  controlled  by  Oath, 
Inc.,  contains  evidence,  fruits,  and  instrumentalities  of  crime,  all  as  specified  in  Attachment  C 
hereto.  Accordingly,  the  Provider  is  hereby  directed  to  provide  to  the  Investigative  Agencies, 
within  7  days  of  the  date  of  service  of  this  Warrant  and  Order,  the  records  specified  in  Section  11 
of  Attachment  C  hereto,  for  subsequent  review  by  law  enforcement  personnel  as  authorized  in 
Sections  III  and  IV  of  Attachment  C.  The  Government  is  required  to  serve  a  copy  of  this  Warrant 
and  Order  on  the  Provider  within  14  days  of  the  date  of  issuance.  The  Warrant  and  Order  may  be 
served  via  electronic  transmission  or  any  other  means  through  which  the  Provider  is  capable  of 
accepting  service. 
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2.  Non-Disclosure  Order.  Pursuant  to  18  U.S.C.  §  2705(b),  the  Court  finds  that  there  is 
reason  to  believe  that  notification  of  the  existence  of  this  warrant  will  result  in  destruction  of  or 
tampering  with  evidence  or  flight  from  prosecution,  or  otherwise  will  seriously  jeopardize  an 
ongoing  investigation.  Accordingly,  it  is  hereby  ordered  that  the  Provider  shall  not  disclose  the 
existence  of  this  Warrant  and  Order  to  the  listed  subscriber  or  to  any  other  person  for  a  period  of 
180  days  from  the  date  of  this  Order,  subject  to  extension  upon  application  to  the  Court  if 
neeessaryyexeept1:hat-Provider'may~disclose=this=Warrant=and-Order”to-an=^ttomey  ford^rovider— 
for  the  purpose  of  receiving  legal  advice. 

3.  Sealing.  It  is  further  ordered  that  this  Warrant  and  Order,  and  the  Affidavit  upon  which 
it  was  issued,  be  filed  under  seal,  except  that  the  Government  may  without  further  order  of  this 
Court  serve  the  Warrant  and  Order  on  the  Provider;  provide  copies  of  the  Affidavit  or  Warrant  and 
Order  as  need  be  to  personnel  assisting  the  Government  in  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure 
obligations  in  any  prosecutions  related  to  this  matter. 

Dated:  New  York,  New  York 


Date  Issued  Time  Issued 


HONORABLE  GABRIEL  W.  GORENSTEIN 
Chief  United  States  Magistrate  Judge 
Southern  District  of  New  York 
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Email  Search  Attachment  C 

I.  Subject  Account  and  Execntion  of  Warrant 

This  warrant  is  directed  to  Oath,  Inc.  (the  “Provider”),  headquartered  at  22000  AOL  Way, 
Dulles,  Virginia  20166,  and  applies  to  all  content  and  other  information  within  the  Provider’s 
possession,  custody,  or  control  associated  with  the  email  account ^^|@aoLcom  (the  “Subject 
Accoimt”)  for  the  time  period  between  December  1,2016  and  the  date  of  this  warrant,  inclusive. 

- ^A-law-enforcement-officer-wilTserve  this-warrant-by-transmittingAt-via-emaiLor-another 

appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  infoimation  specified  in  Section  II  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  III  below. 

II.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Account: 

a.  Email  content  All  emails  sent  to  or  from,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Account,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email). 

b.  Address  book  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Account. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Account,  including  but  not  limited  to  name,  username,  address,  telephone 
number,  alternate  email  addresses,  registration  IP  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 
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d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Account, 
including  any  IP  logs  or  other  records  of  session  times  and  durations. 

e.  Customer  correspondence.  All  correspondence  with  the  subscriber  or  others  associated 
with  the  Subject  Account,  including  complaints,  inquiries,  or  other  contacts  with  support  services 
and  records  of  actions  taken. 

f.  Search  History.  All  search  history  and/or  web  history. 
======^-g“PrByen;e#or-/raefe/>=recGr<A'FAnypreserved-or  backup  copiesmPany  of  the=foregoing==== 

categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  18 
U.S.C.  §  2703(1)  or  otherwise, 
m.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
and  instrumentalities  of  violations  of  18  U.S.C. §§371  (conspiracy  to  commit  offense  or  to  defraud 
the  United  States),  1005  (false  banlc  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (bank  fraud),  including  the  following; 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Account; 

b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to^^^^^^^^^|ind/or  entities  associated 
with  him; 
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c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 
communicated  with  the  Subject  Account  about  any  matters  relating  to  any  plan  or  proposal  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  and/or  entities  associated 

with  him; 

==Tj~Communications=betweenA;he  -  Subj  eGCA;eeGunt=and=others,-ineluding^employees"'on 
representatives  of  Sterling  National  Bank,  Melrose  Credit  Union,  or  other  financial  institution(s), 
regarding  Michael  D.  Cohen’s  finances;  and 

e.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution. 

IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 


02.28.2018 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 
Associated  with  the  Email  Account 
maintained  at 

Premises  Controlled  by  1  &  1  Internet, 
Inc.,  USAO  Reference  No. 
2018R00127 


-  Search  Warram  and  Non-Disclosurk  Ordkr  ^ ^ 

TO:  1  &  1  Internet,  Inc.  (“Provider”) 

United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  the  Federal 

Bureau  of  Investigation  (collectively,  the  “Investigative  Agencies”) 

1.  Warrant.  Upon  an  affidavit  of  Special  Agent  the  United  States 

Attorney’s  Office  for  the  Southern  District  of  New  York,  and  pursuant  to  the  provisions  of  the 
Stored  Communications  Act,  18  U.S.C.  §  2703(b)(1)(A)  and  §  2703(c)(1)(A),  and  the  relevant 
provisions  of  Federal  Rule  of  Criminal  Procedure  41,  the  Court  hereby  finds  there  is  probable 
cause  to  believe  the  email  account  maintained  at  premises  controlled  by  1 

&  1  Internet,  Inc.,  contains  evidence,  fruits,  and  instrumentalities  of  crime,  all  as  specified  in 
Attachment  D  hereto.  Accordingly,  the  Provider  is  hereby  directed  to  provide  to  the  Investigative 
Agencies,  within  7  days  of  the  date  of  service  of  this  Warrant  and  Order,  the  records  specified  in 
Section  II  of  Attachment  D  hereto,  for  subsequent  review  by  law  enforcement  personnel  as 
authorized  in  Sections  III  and  IV  of  Attachment  D.  The  Government  is  required  to  serve  a  copy 
of  this  Warrant  and  Order  on  the  Provider  within  14  days  of  the  date  of  issuance.  The  Warrant 
and  Order  may  be  served  via  electronic  transmission  or  any  other  means  through  which  the 
Provider  is  capable  of  accepting  service. 
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2.  Non-Disclosure  Order.  Pursuant  to  18  U.S.C.  §  2705(b),  the  Court  finds  that  there  is 
reason  to  believe  that  notification  of  the  existence  of  this  wan'ant  will  result  in  destruction  of  or 

tampering  with  evidence  or  flight  from  prosecution,  or  otherwise  will  seriously  jeopardize  an  j 

ongoing  investigation.  Accordingly,  it  is  hereby  ordered  that  the  Provider  shall  not  disclose  the 
existence  of  this  Warrant  and  Order  to  the  listed  subscriber  or  to  any  other  person  for  a  period  of 
180  days  from  the  date  of  this  Order,  subject  to  extension  upon  application  to  the  Court  if 
==^neeessaryi=exeept4hatdProvidenmay^discleseAisTWarrantrand^Order-te^n.nttoHieyrfe]dlr0videi=-r:'. 
for  the  purpose  of  receiving  legal  advice. 

3.  Sealing.  It  is  further  ordered  that  this  Warrant  and  Order,  and  the  Affidavit  upon  which 
it  was  issued,  be  filed  imder  seal,  except  that  the  Government  may  without  further  order  of  this 
Court  serve  the  Warrant  and  Order  on  the  Provider;  provide  copies  of  the  Affidavit  or  Warrant  and 
Order  as  need  be  to  personnel  assisting  the  Government  in  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure 
obligations  in  any  prosecutions  related  to  this  matter. 

Dated;  New  York,  New  York  | 


Date  Issued  Time  Issued 


HONORABLE  GABRIEL  W.  GORENSTEEsf 
Chief  United  States  Magistrate  Judge 
Southern  District  of  New  York 


02,28.2018 
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Email  Search  Attachment  D 
1.  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  1  &  1  Internet,  Inc.  (the  “Provider”),  headquartered  at  701  Lee 
Road,  Suite  300,  Chesterbrook,  Pennsylvania  19087,  and  applies  to  all  content  and  other 
information  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email  account 
(the  “Subject  Account”)  for  the  time  period  between  November  14,  2017 
.and-the^datemLthisJwarrant,Jnclusive - - - - — 

A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another 
appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  II  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  III  below, 
n.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Account: 

a.  Email  content.  All  emails  sent  to  or  from,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Account,  including  all  message  content,  attachments,  and  header 
infonnation  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email). 

b.  Address  book  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Account. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Account,  including  but  not  limited  to  name,  username,  address,  telephone 
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number,  alternate  email  addresses,  registration  IP  address,  accoimt  creation  date,  accoimt  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Account, 
including  any  IP  logs  or  other  records  of  session  times  and  durations. 

e.  Customer  correspondence.  All  correspondence  with  the  subscriber  or  others  associated 

with  the  Subject  Account,  including  complaints,  inquiries,  or  other  contacts  with  support  services 
-and=reeords^oPaetionsd:aken= - -  ^ - - 


f.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  18 
U.S.C.  §  2703®  or  otherwise, 
ni.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
and  instrumentalities  of  violations  of  1 8  U.S.C.  §§371  (conspiracy  to  commit  offense  or  to  defraud 
the  United  States),  1005  (false  bank  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (bank  fraud),  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Account; 

b.  Communications,  records,  documents,  and  other  files  involving  Sterling  National 
Bank,  Melrose  Credit  Union,  and/or  taxi  medallions; 

c.  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
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land/or 


medallions,  and  any  associated  debts  or  liabilities,  to  others,  including  to| 
entities  associated  with  him; 

d.  Communications,  records,  documents,  and  other  files  involving  Essential  Consultants, 
LLC  or  Michael  D.  Cohen  &  Associates,  including  those  which  indicate  the  nature  and  purpose  of 
payments  made  to  or  from  Essential  Consultants  or  Michael  D.  Cohen  &  Associates; 

e.  The  identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the 
^pSaOT(^)"^^=^ho-eomfflunicated"with~the-Subjeet=Aceount”abouCan3Fm:atters=TelatingTo~Esaentral= 


Consultants,  LLC,  or  about  any  plan  or  proposal  or  agreement  for  Michael  D.  Cohen  and/or  entities 
associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  h^^^^^^^^^^and/or  entities  associated  with  him; 

f.  Communications  between  the  Subject  Account  and  Jeffrey  Getzel  relating  to  Michael 
D.  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 

g.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 

h.  Evidence  indicating  how  and  when  the  Subject  Account  was  accessed  or  used,  to 
determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner;  and 

i.  Evidence  indicating  the  Subject  Account  owner’s  intent  as  it  relates  to  the  Subject 
Offenses  under  investigation. 


02,28.2018 
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IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 


02.28.2018 
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r\  r%  i  I  f\\  A 
(  j  i-A  i  1  ■■]  1  1  \  1  /— \ 

AO  93  (SONY  Rev.  05/10)  Seardtranis^Mire'Wakint  '^  ^  '■ 


United  States  District  Court 

for  the 

Southern  District  of  New  York 

In  the  Matter  of  the  Search  of 

(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

A  Device  Containing  the  Results  of  Three  Email  Search 
Warrants,  See  Attachment  A 

SEARCH  AND  SEIZURE  WARRANT 

To:  Any  authorized  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 
of  the  following  person  or  property  located  in  the  _ Southern  District  of  _ New  York 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location)'. 

A  Device  Containing  the  Results  of  Three  Email  Search  Warrants,  See  Attachment  A 


The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)'. 

See  Attachment  A 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 
property. 


YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before 


'  (not  to  exceed  14  days) 


□  in  the  daytime  6:00  a.m.  to  10  p.m. 


at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 
established. 


Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken.  .  \  ■ '  f  '  ^  v 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  wajri'ant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  0f  the  Court. 

^  Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk’pf  the  Court. 


Sf  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U;S,G.'k'2V05^^(except 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person,  who, 'of  whose  property,  vail  be 
searched  or  seized  (check  the  appropriate  box)  pffor  30  days  (not  to  exceed  30).  '  ;  T  ,  )  ^  = 
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Attachment  A 


I.  Device  to  be  Searehed 

The  device  to  be  searched  (the  “Subject  Device”)  is  described  as  a  black  and  red  USB  drive 
with  aAvhite  label  that  says  “Tracking  #:  180208140208”,  which  contains  emails  and  other  content 
information  obtained  pursuant  to  the  three  search  warrants,  numbered  17-mj-00503,  17-mj-00855 
and  17-mj-00854,  obtained  by  the  Special  Counsel’s  Office  (“SCO”),  less  the  emails  that  were 
screened  and  removed  by  the  SCO’s  privilege  team. 

II.  Review  of  ESI  on  the  Subject  Devices 

Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and  agents, 
and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and  related  proceedings, 
attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the  government  in 
this  investigation,  interpreters,  and  outside  vendors  or  technical  experts  under  government  control) 
are  authorized  to  review  the  ESI  contained  on  the  Subject  Device  for  evidence,  fruits,  and 
instrumentalities  of  one  or  more  violations  of  18  U.S.C.  §  371  (conspiracy  to  defraud  the  United 
States),  1005  (false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire 
fraud),  and  1344  (bank  fraud)  (collectively,  the  “Subject  Offenses”),  as  listed  below: 

a.  Communications,  records,  documents,  and  other  files  involving  Sterling  National 
Bank,  Melrose  Credit  Union,  and/or  taxi  medallions; 


b.  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  others,  including  to^^^^^^^^^^and/or 
entities  associated  with  him; 

c.  The  identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the 
person(s)  —  who  communicated  with  ^^^^^^^@gmail.com  and/or  ||^m||||||||||H|^|  (the 
“Subject  Accounts”)  about  any  plan  or  proposal  or  agreement  for  Michael  D.  Cohen  and/or  entities 
associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to^^^^^^^^|and/or  entities  associated  with  him; 

d.  Communications  between  the  Subject  Accounts  and  Jeffrey  Getzel  relating  to 
Michael  D.  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 
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e.  Evidence  indicating  the  owner  of  the  Subject  Accounts’  intent  as  it  relates  to  the 
Subject  Offenses  under  investigation. 
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UNITED  STATES  DISTRICT  COUTcT  ^ 
SOUTHERN  DISTRICT  OF  NEW  YORK 


18  MAG  2877 


In  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 
Associated  with  the  Email  Accounts 


TO  BE  FILED  UNDER  SEAL 


AGENT  AFFIDAVIT 


Premises  Controlled  by  Google,  Inc., 
USAO  Reference  No.  2018R00127 


and 

ti,  Maintained  at 


Agent  Affidavit  in  Support  of  Application  for  a  Search  Warrant 
for  Stored  Electronic  Communications 


STATE  OF  NEW  YORK  ) 

)  ss. 

COUNTY  OF  NEW  YORK  ) 

Special  Agent  ^^^^^|of  the  United  States  Attorney’s  Office  for  tire  Southern 
District  of  New  York,  being  duly  sworn,  deposes  and  states: 

1.  Introduction 

1 .  I  am  a  Special  Agent  with  the  United  States  Attorney’s  Office  for  the  Southern  District 
of  New  York  (the  “USAO”).  I  have  been  a  Special  Agent  with  the  USAO  since  August  2016.  I 
previously  served  as  a  Special  Agent  with  the  United  States  Depaitment  of  Labor  Inspector 
General  from  May  2011  to  August  2016.  In  the  course  of  my  experience  and  haming  in  these 
positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a  v^nde  aiTay 
of  financial  crimes,  including  frauds  on  financial  institutions.  I  also  have  training  and  experience 
executing  search  waiTants,  including  those  authorizing  the  search  of  email  accounts. 

2,  I  make  tliis  affidavit  in  support  of  an  application  for  a  seaich  warrant  piu'suant  to  18 
U.S.C.  §  2703  for  all  content  and  other  infoimation  associated  with  the  email  accounts 


(the  “Subject 


lgmail.com. 


Accounts”),  maintained  and  confrolled  by  Google,  Inc.  (the  “Provider”),  headquartered  at  1600 
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Ainphifteatre  Parkway.  Mountain  View.  California  94043.  The  information  to  be  searched  is 
described  in  the  following  paragraphs  and  in  Attachments  A  and  B  to  the  proposed  warrant. 

3.  On  or  about  February  28. 2018. 1  submitted  an  Affidavit  in  support  of  an  application 

for  a  search  warrant  pursuant  to  18U.S.C.  §2703forali  content  and  other  infoimation  associated 

with  the  Subject  Accounts  maintained  and  controlled  by  the  “Provider,  a  true  and  correct  copy  of 
which  is  attached  hereto  as  Exhibit  A  (the  “Original  Affidavit”),  and  which  is  taco^orated  by 

reference  as  if  fully  set  forth  herein. 

4.  OnThat  same  date,  the  Honorable  Gabriel  W.  Oorenstein.  United  States  Magistrate 
Judge,  issued  a  search  warrant  for  the  requested  data,  a  true  and  correct  copy  of  which  is  attached 
hereto  as  Exhibit  B  (the  “Original  Search  Warrant”).  Shortly  thereafter,  the  Provider  was  served 
with  the  Original  Search  Warrant.  On  or  about  March  7.  2018.  the  Provider  provided  a  response 
to  the  Original  Search  Warrant.  That  return  was  incomplete  because  the  Provider  dechned  to 
produce  data  that  it  stored  on  computer  servers  located  outside  of  the  Umted  States.  It  ts  my 
understanding,  fiom  speaking  with  the  Assistant  United  States  Attorney  assigned  to  this  matter  as 
well  as  other  law  enforcement  agents,  that  the  Provider’s  refusal  to  provide  foreign  stored  data  was 
in  light  of  the  Second  Circuit’s  decision  in  which  it  held  that  Microsoft  Corporatron  was  not 
required  to  produce  foreign  stored  data  pursuant  to  a  warrant  issued  under  the  Stored 
Communications  Act.  See  Mamr  ofWarran,  ,o  Search  a  Certain  E-Mail  Account  Conlrolled  and 
Maintained  by  Microsoft  Corporation.  829  F.3d  197  (2d  Cir.  2016),  cert,  granted  138  S.  Ct.  356 
(2017)  (the  “Microsoft  Litigation”)- 


1 1'hp  Oriffinal  Affidavit  also  sought  content  infoimation  for  two  additional  email  accorats  hosted 
by  ^fferenT“r  Tltis  affidavit  only  requests  a  seareh  warrant  wiUt  respect  to  the  Subject 

Accounts  described  herein. 


2017.03.25 
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5.  On  March  23,  2018,  the  Clarifying  Lawful  Overseas  Use  of  Data  Act  (the  “CLOUD 

Act”)  was  enacted  and  became  law.  The  CLOUD  Act  clai'ifles  that  in  respondhig  to  legal  process 

issued  under  the  Stored  Communications  Act,  providers  ai'e  required  to  disclose  data  even  if  it  is 

stored  abroad.  Specifically,  section  103  of  the  CLOUD  Act  amended  18  U.S.C.  §  2713  as  follows: 

§  2713.  Requhed  preservation  and  disclosure  of  communications  and  records 
A  provider  of  electronic  communication  service  or  remote  computing  service  shall  comply 
with  the  obligations  of  this  chapter  to  preserve,  backup,  or  disclose  tlie  contents  of  a  wire 
or  elech'onic  communication  and  any  record  or  other  infoimation  pertaining  to  a  customer 
or  subscriber  within  such  provider’s  possession,  custody,  or  conti'ol,  regardless  of  whether 
_  such  communication,  record,  or  other  information  is  located  within  onoutside  of  the  United 
States. 

6.  From  my  background,  fraining,  and  experience  in  this  investigation  and  in  others,  I 
know  that,  in  general,  any  email  (which  can  include  attachments  such  as  documents,  images,  and 
videos)  sent  to  or  from  a  subscriber’s  account,  or  stored  in  draft  form  in  the  account,  is  maintained 
on  the  Provider’s  servers  unless  and  until  the  subscriber  deletes  tire  email.  If  the  subscriber  does 
not  delete  the  email,  it  can  remain  on  the  Provider’s  computers  indefinitely.  Even  if  the  subscriber 
deletes  the  email,  it  may  continue  to  be  available  on  Are  Provider’s  servers  for  a  certain  period  of 
time.  In  addition,  from  my  review  of  other  seai-ch  wairant  returns  in  this  investigation,  I  know  that 
the  subjects  of  the  investigation  maintained  email  data  relevant  to  the  investigation  in  email 
accounts  for  many  months  after  the  email  was  sent  or  received. 

7.  Accordingly,  I  respectfully  submit  this  Affidavit  seeking  the  issuance  of  the  attached 
proposed  search  warrant  which  seeks  the  same  data  as  was  sought  in  the  Original  Search  Wan  ant, 
for  the  reasons  set  forth  in  the  Original  Affidavit  and  herein. 

II.  Request  for  Non-Disclosure  and  Sealing  Order 

8.  The  existence  and  scope  of  this  ongoing  criminal  investigation  are  not  publicly  known. 

As  a  result,  premature  public  disclosure  of  this  affidavit  or  the  requested  warrants  could  alert  target 
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subject  Michael  Cohen  that  he  is  under  investigation,  causing  him  to  destroy  evidence,  flee  from 
prosecution,  or  otherwise  seriously  jeopardize  the  investigation,  hi  particulai",  based  on  my 
experience  investigating  white  collar  cases,  including  cases  featuring  documents  such  as 
agreements,  drafts  of  agreements,  notes  of  conversations,  and  other  documentary  evidence, 
premature  disclosure  of  an  investigation  may  cause  the  target  of  the  investigation  to  attempt  to 
destroy  or  conceal  such  evidence.  In  addition,  as  set  forth  in  the  Original  Affidavit,  Cohen  uses 
computers  and  electronic  communications  in  furtherance  of  his  activity  and  thus  could  easily 
delete,  encrypt,  or  otherwise  conceal  such  digital  evidence  fr-om  law  enforcement  were  he  to  leai-n 
of  tlie  Government’s  investigation.  See  18  U.S.C.  §  2705(b)(3).  Cohen  also  appears  to  have  the 
financial  means  that  would  facilitate  his  flight  from  prosecution.  See  18  U.S.C.  §  2705(b)(2),  (5). 

9.  Accordingly,  there  is  reason  to  believe  that,  were  the  Provider  to  notify  the  subscriber 
or  others  of  the  existence  of  the  wairant,  the  investigation  would  be  seriously  jeopardized. 
Pursuant  to  18  U.S.C.  §  2705(b),  I  therefore  respectfully  request  that  the  Court  dfrect  the  Provider 
not  to  notify  any  person  of  the  existence  of  the  warrant  for  a  period  of  180  days  from  issuance, 
subject  to  extension  upon  application  to  the  Court,  if  necessaiy. 

10.  For  similar  reasons,  I  respectfully  request  that  this  affidavit  and  all  papers  submitted 
herewitli  be  maintained  imder  seal  until  the  Court  orders  othei-wise,  except  that  the  Govenunent 
be  pennitted  without  further  order  of  tliis  Court  to  provide  copies  of  the  wanant  and  affidavit  as 
need  be  to  personnel  assisting  it  in  tlie  investigation  and  prosecution  of  this  matter,  and  to  disclose 
those  materials  as  necessary  to  comply  with  discovery  and  disclosure  obligations  in  any 
prosecutions  related  to  this  matter. 
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III.  Conclusion 

11.  Based  on  the  foregoing,  I  respectfully  request  that  the  Court  issue  the  warrant  sought 
herein  pursuant  to  the  applicable  provisions  of  the  Stored  Communications  Act,  18  U.S.C. 
§  2703(b)(1)(A)  (for  contents)  and  §  2703(c)(1)(A)  (for  records  and  other  information),  and  the 
relevant  provisions  of  Federal  Rule  of  Criminal  Procedure  41 . 


United  States  Attorney's  Uttrce 
Southerir  District  of  New  York 


Sworn  to  before  me  this 


day  of  April,  2018 


United  States  Magistrate  Judge 
Southern  District  of  New  York 
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UMTED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 


Aggorigfflfi  ^th  the  Email  Accounts 
l@gmail.com, 
l@gmail.com,  and 

Maintained  at 

Premises  Conh’oUe^^Google^c., 
the  Email  Accoum^^^^^^^l 
Maintained  at  Premises  Conh’olled  by 
-Oath,  Inc.,  and  the  Email  Accoimt 
maintained 

Premises  Controlled  by  1  &  1  Internet, 
Inc.,  USAO  Reference  No. 
2018R00127 


TO  BE  FILED  UNDER  SEAL 
AGENT  AFFIDAVIT 


18  MAG  169  6 


Agent  Affidavit  in  Support  of  Application  for  a  Search  Warrant 
for  Stored  Electronic  Communications 


STATE  OF  NEW  YORK  ) 

)  ss. 

COUNTY  OF  NEW  YORK  ) 

Special  Agent  the  United  States  Attorney’s  Office  for  the  Southern 

District  of  New  York,  being  duly  sworn,  deposes  and  states: 

I.  Introduction 
A.  Affiant 

1.  I  am  a  Special  Agent  with  the  United  States  Attorney’s  Office  for  the  Southern  District 
of  New  York  (the  “USAO”).  I  have  been  a  Special  Agent  with  the  USAO  since  August  2016.  I 
previously  served  as  a  Special  Agent  with  the  United  States  Department  of  Labor  Inspector 
General  from  May  2011  to  August  2016.  In  the  comse  of  my  eiqperience  and  training  in  these 
positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a  wide  array 
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of  financial  crimes,  including  j&auds  bn  financial  institutions.  1  also  have  training  and  experience 
executing  search  warrants,  including  those  authorizing  the  search  of  email  accomits. 

B.  The  Provider,  the  Subject  Account  and  the  Subject  Offenses 

2.  I  make  this  affidavit  in  support  of  an  application  for  a  search  warrant  pursuant  to  18 
U.S.C.  §  2703  for  all  content  and  other  information  associated  with  the  email  accounts 
^^^^^^@gmail.com  (the  “Cohen  Account”),  Cbe  “h/IDCPC 

Accormt”),^^^^^gmail.com  (the  -  ^^^^^^^^|4ccount”),  (fbe 

^^^^^^^^H^ccounfOi  anc^^B^aol.com  (the  ^^^\ccount”)  (collectively,  the 
“Subject  Accounts”).  The  Cohen  Account,  ^^^^^^^^^^^.ccount, 

Account  are  maintained  and  controlled  by  Google,  Inc.,  headquartered  at  1600  Amphitheatre 
Parkway,  Mountain  View,  California  94043  (“Google”),  the  MDCPC  Account  is  maintained  and 
controlled  by  1  &  1- Internet,  Inc.,  headquartered  at  701  Lee  Road,  Suite  300,  Chesterbrook, 


Pennsylvania  19087  (“1  &  1”),  and  ffaJ 


lAccount  is  maintained  and  controlled  by  Oath,  Inc., 
22000  AOL  Way,  Dulles,  Virginia  20166  (“Oath”)  (together,  the  ‘Troviders”).  The  information 
to  be  searched  is  described  in  the  following  paragraphs  and  in  Attachments  A,  B,  O  and  D  to  the 
proposed  warrants. 

3 .  As  detailed  below,  there  is  probable  cause  to  believe  that  the  Subject  Accounts  contain 
evidence,  fruits,  and  instrumentalities  of  violations  of  18  U.S.C.  §  371  (conspiracy  to  defi'audthe 
United  States),  1005  (false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fiaud),  and  1344  (banlc  fiuud)  (collectively,  the  “Subject  Offenses”).  The  Target  Subjects  of 
this  investigation  are  MICHAEL  COHEN  (“Cohen”)  and  otirers  known  and  unknown.  This 
affidavit  is  based  upon  my  personal  knowledge,  my  review  of  documents  produced  pursuant  to 
grand  jury  subpoenas  and  prior  search  warrants,  my  review  of  interview  reports  prepared  by  other- 
law  enforcement  officers,  and  my  conversations  with  other  law  enforcement  officers,  as  well  as 
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mytrainingandexperienceconcerningtheuseofemanmcrinimaU^^^^  Beca 

,  purpose  of  es^ishiug  probaWe  cause,  i.  does  no.  taCude  aU 

.,.fae..bavelearuedduring.y— 

a..ureu.,  aud  couuersadoua  of  odsers  are  reposed  Kere.,  are 

part,  except  where  otherwise  indicated. 

C.  ServicesandRecordsoftheProvider 

_ 4.  I  have  leai-ned  AefoUowing  about  the  Providers:^ 

a,  The  Providers  offer  email  services  to  dre  pubUe.  lu  parhcular.  Cdoogle  pennite 

subscribers  to  maiutaiu  email  a«.urr«  under  the  domain  name  gmaUnonr.  Google  also  allows  a 

3ubscriber.on.ain,ah,ernailac«,unmunderanydomai^^  . 

Google  enables  the  subscriber 

example,  if  a  subscriber  controls  the  domain  nam 

.  .os.  an,  emau  address  under  dris  doma.  uarne  on  sravers  op^amd  b,  (hro,^^ 

3nbsoriberstonmhr.a.em.ilaocountsund.d.edomah.nanrcaol.com.mlp 

ronmhrtahremailaccoun.rmderanydomalnname.underd.esubscrlber's^^^^ 

1  &  1  enables  the  subscriber  to  host  any 

if  a  subscriber  controls  the  domain  namt^^^^" 

+£./!  Vni  .1  1  A  subscriber  using  the 

amail  addiesa  under  dns  domain  name  on  servers  opemted  by  1  &  ■ 

tyic  nr  her  email  account  from  any  computer  connected  to  the 
Providers’  sei-vices  can  access  his  or  hex  emau  acco 


Internet. 


idersmaintamdrefollowtagrecords  and  information  with  respectto  every 


b.  The  Providers 
subscriber  account: 

i.  Wconrenrs.  h, geneml, any emaU (which ean inolnde adadnnenm such 

docnmenls.  images,  and  videos)  sent  to  or  ftom  a  snbsc.lbe,-s  account,  or  stored  m  draft  form 
te  acmunt.  is  maintoined  on  dre  Provide^'  servers  unless  and  nndl  dre  subscriber 


as 

in 
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indefinitely.  Even  if  the  subscriber  deletes  the  email,  it  may  continue  to  be  available  on  the 

Provider’s  servers  for  a  certain  period  of  time. 

ii.  Address  book.  ^  The  Providers  also  allow  subscribers  to  maintain  the 

equivalent  of  an  address  book,  comprising  email  addresses  and  other  contact  information  of  other 
email  users. 

iii.  Subscriber  and  billing  information.  Tire  Providers  collect  and  maintain 
(typically  unverified)  identifying  information  about  each  subscriber,  including,  for  example,  name, 
username,  addr-ess,  telephone  number,  aird  alternate  email  addresses.  The  Providers  also  maintain 
records  concerning  the  date  on  which  the  account  was  created,  the  Internet  protocol  (“ff  ”)  address 
of  the  user  at  the  time  of  account  creation,  the  current  status  of  the  account  (e.g.,  active  or  closed), 
the  length  of  service,  aird  the  types  of  services  utilized  by  the  subscriber.  Additionally,  for  pajdng 
subscribers,  the  Providers  maintain  records  of  the  subscriber’s  means  and  source  of  payment, 

including  any  credit  card  or  bank  account  nximber. 

iv.  Transactipnal  information.  The  Providers  also  typically  retain  certain 

transactional  information  about  the  use  of  each  account  on  its  system.  This  information  can  mclude 
records  of  login  (/.e.,  session)  times  and  durations  and  the  methods  used  to  connect  to  the  account 

(such  as  logging  into  the  account  through  the  Providers’  website), 

v.  Customer  correspondence.  The  Provider's  also  typically  maintain  records 
of  any  customer  service  contacts  with  or  about  the  subscriber,  including  any  inquiries  or 

complaints  concerning  the  subscriber’s  accormt. 

vi.  Search  history.  Google  and  Oath  also  typically  maintain  records  of  any 

search  history  or  web  history  associated  with  the  subscriber  s  accorrrit. 


I 
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vii.  Associated  content.  Google  also  typically  maintains  content  and  records 
relating  to  the  following  applications  that  are  associated  witli  its  e-mail  accounts:  (A)  “Google 
Docs,”  which  provides  document-editing  software  that  can  be  used  to  create,  share,  store,  and 
manage  documents  online;  (B)  “Google  Drive,”  which  enables  users  to  store  files  on  Google 
servers,  where  they  can  be  accessed  remotely  by  the  user  and  others;  and  (C)  “Gchat  or  Instant 
Messenger,”  wliich  provides  a  chat  interface  through  which  users  can  communicate  with  each 
■other  in  real  time.  Oath  also  typically  maintains  content  and  records  relating  to  AOL  instant- 
message,  which  provides  a  chat  interface  through  which  users  can  communicate  with  each  other 

in  real  time. 

viii.  Preserved  and  backup  records.  The  Providei-s  also  maintain  preserved 
copies  of  the  foregoing  categories  of  records  with  respect  to  an  account,  for  at  least  90  days,  upon 
receiving  a  preseivation  request  from  the  Government  pursuant  to  18  U.S.C.  §  2703(f).  The 
Providers  may  also  maintain  backup  copies  of  the  foregoing  categories  of  records  pursuant  to  its 

own  data  retention  policy. 

D.  Jurisdiction  and  Authority  to  Issue  Warrant 

5.  Pm-suantto  18  U.S.C.  §§  2703(a),  (b)(1)(A)  &  (c)(1)(A),  the  Government  may  require 

a  provider  of  an  electronic  communications  service  or  a  remote  computing  service,  such  as  the 
Providers,  to  disclose  aU  stored  content  and  aU  non-content  records  or  other  information  pertaining 
to  a  subscriber,  by  obtaining  a  warrant  issued  using  the  procedures  described  in  the  Federal  Rules 

of  Criminal  Procedure. 

6.  A  search  warrant  under  §  2703  may  be  issued  by  “any  district  court  of  the  United  States 
(including  a  magistrate  judge  of  such  a  court)”  that  “has  jurisdiction  over  the  offense  being 
investigated.”  18  U.S.C.  §  271  l(3)(A)(i). 
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7.  When  the  Government  obtains  records  under  §  2703  pursuant  to  a  search  warrant,  the 
Government  is  not  required  to  .notify  die  subscriber  of  die  existence  of  the  warrant.  18  U.S.C. 

§  2703(a),  (b)(1)(A),  (c)(2)  &  (3).  Additionally,  the  Government  may  obtain  an  order  precluding 
the  Provider  from  notifying  the  subscriber  or  any  odier  person  of  the  warrant,  for  such  period  as 
the  Court  deems  appropriate,  where  there  is  reason  to  believe  that  such  notification  will  seriously 
jeopardize  an  investigation.  18  U.S.C.  §  2705(b). 

-  E.  Prior  Applications  ^ 

8.  On  or  about  July  18, 201 7,  in  connection  with  an  investigation  being  conducted  by  the 

Office  of  the  Special  Counsel  (“SCO”),  the  Federal  Bureau  of  Investigation  (‘TBP’)  sought  and 
obtained  from  the  Honorable  Beryl  A.  Howell.  Chief  United  States  District  Judge  for  the  District 
of  Columbia,  a  search  warrant  for  emails  in  the  Cohen  Account  sent  or  received  between  January 
1,  2016  and  July  18,  2017.  On  or  about  November  13,  2017,  die  FBI  sought  and  obtained  from 
Judge  Howell  search  wan’ants  for  emails  in  the  Cohen  Account  sent  or  received  between  June  1. 
2015  and  November  13,  2017,  and  emaUs  in  the  MDCPC  Account  sent  or  received  between  the 

opening  of  die  accoimt  and  November  .13,  2017.  The  SCO  has  since  refened  certain  aspects  of 

their  investigation  into  Cohen  to  die  USAO,  which  is  worldng  with  the  FBI’s  New  York  Field 
Office.  As  part  of  that  referral,  the  SCO  provided  the  USAO  with  emails  and  other  content 
infoimation  obtained  pursuant  to  the  search  wari-ante  executed  by  the  SCO,  which  had  aheady 
been  reviewed  for  privilege.  ^  As  discussed  below,  this  affidavit  is  based  in  part  on  my  review  of 


•  In  an  abundance  of  caution,  in  a  separate  application  the  USAO  has  sought  authorization, 
nursuantto  Fed.  R:  Ciim.  P.  41,  to  review  the  emails  obtained  pursuant  to  tiie  Prior  Cohen  Accoim 
Wai-rants  for  ^id^ce  related  to  certain  additional  conduct  that  was  not  die  focus  of  ^ 
Cohen  Account  Warrants.  The  emails  obtained  finm  the  Prior  Cohen  Account  Warrants  that  lelate 
to  that  additional  conduct  do  not  fonn  a  basis  for  the  instant  application. 
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responsive  materials  produced  pursuant  to  the  July  18  and  November  13, 2017  warrants  (the  “Prior 
Cohen  Account  Warrants”). 

9.  On  or  about  November  7, 2017,  and  January,4, 2018,  as  well  as  certain  prior  dates,  the 
SCO  sought  and  obtained  from  Judge  Howell  orders  authorizing  and  extending  the  installation  and 
use  of  pen  registers  and  trap  and  trace  devices  to  record  communications  sent  to  or  from  the  Cohen 
Account.  The  SCO  has  provided  pen  register  data  obtained  pursuant  to  those  orders  to  the  US  AO. 

This  affidavit,  as  discussed  below,  is  based  in  part  on  my  review  of  the  pen  register  data  obtained - 

pursuant  to  the  November  7, 2017  and  January  4, 2018  orders  (the  "Pen  Register  Data”). 

10.  On  or  about  February  16,  2018,  the  USAO  sought  and  obtained  from  the  Honorable 
Debra  Freeman,  United  States  Magistrate  Judge  for  the  Southern  Disfrict  of  New  York,  an  order 
pursuant  to  18  U.S.C.  §  2703(d)  for  email  header  infoimation  associated  with  the  MDCPC 
Account.  This  affidavit,  as  discussed  below,  is  based  in  pait  on  my  review  of  email  header 
information  produced  by  1  &  1  in  response  to  that  order  (the  "MDCPC  Header  Information  ). 

n.  Probable  Cause 
A.  Overview 

1 1 .  The  United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  FBI  are 
inve.stigating,  among  other  things,  a  scheme  by  Target  Subject  Michael  Cohen  to  defraud  multiple 
banlcs.  Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President 
Donald  Trump,  and  who  previously  served  for  over  a  decade  as  an  executive  m  the  Trump 
Organization,  an  international  conglomerate  with  real  estate  and  otiier  holdings. 

12.  The  investigation  has  revealed  that  Cohen  has  made  affirmative  misrepresentations  in 
and  omitted  . material  infoimation  from  financial  statements  and  othei-  disclosures  that  Cohen 
provided  to  multiple  banks  in  connection  witli  a  transaction  intended  to  relieve  Cohen  of 
approximately  $22  million  in  debt  he  owed  on  taxi  medallion  loans  fi-om  the  banlcs.  As  set  forth 
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in  detail  below,  in  these  financial  statements,  and  in  his  oral  and  other  written  statements  to  these 
banks,  Cohen  appears  to  have  (i)  intentionally  omitted  cash  assets  that  he  began  receivmg  m  2017 
from  new  consulting  work;  (u)  significantly  understated  his  total  holdings  of  cash  and  cash 

equivalents;  and  (iii)  failed  to  inform  the  banks  from  which  he  was  seeking  debt  relief  that  he  had 

in  connection  with 


agreed  to  make  a  $3.8  million  cash  payment  to  a  third  party, 

acquisition  of  the  taxi  medallions  securing  Cohen’s  debt.  By  making  these 
misrepresentations  and  material  omissions,  Cohen  avoided  malcing  monthly  payments  on  his 
loans,  and  attempted  to  and  had  secured  proposed  agreements  firom  the  banks  to  relieve  him  of 

certain  repayment  obligations  worth  millions  of  dollars, 

13.  Based  on  my  review  of  emails  obtained  from  die  Prior  Cohen  Account  Warrants, 
MDCPC  Headei'  Information,  and  documents  produced  pursuant  to  subpoenas,  I  have  learned  that 
Cohen  has  used  the  Cohen  Account  and/or  MDCPC  Account  to,  among  other  things,  CO 


communicate  vwtb 


and  their  attorney, I 


about  the  proposed  transfer  of  Cohen’s  medalHons  and  associated  debts;  (ii)  negotiate  a  pay-down 
of  the  principal  amount  of  tlie  taxi  medallion  loans;  (iii)  communicate  with  his  accountant  about 
the  contents  of  the  false  financial  statements  at  issue;  and  (iv)  send  those  false  financial  statements 
to  banks.  Additionally, 

^ccount^^^^^^HWunt  an^^B^ccount,  respectively,  to  communicate  with  Cohen 


Account  an 

about  the  status  of  the  taxi  medallion  transaction,  and  to  send  relevant  financial  statements  to  . 
banks.  Accordingly,  and  as  set  forth  in  more  detail  below,  there  is  probable  cause  to  believe  that 
the  Subject  Accounts  will  include  evidence  of  the  Subject  Offenses. 

B,  Cohen’s  Statements  to  Sterling  National  Bank 

14.  As  set  forth  in  detail  below,  in  2014,  Cohen,  through  limited  liability  corporations 

("LLCs”)  conti'olled  by  him  and  his  wife,  Lam-a  Cohen,  entered  into  a  series  of  loans  fr  om  Sterling 
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National  Bank  C'Sterling”)  and  the  Melrose  Credit  Union  C‘Melrose”),  secured  by  taxi  medallions, 
for  approximately  $20  million.  Though  entered  into  by  LLCs,  the  loans  were  also  secured  by 
personal  guarantees  in  the  names  of  both  Cohen  and  his  wife.  Over  time,  as  the  taxi  industry 
weakened  and  the  medallions  were  devalued,  Cohen  sought  to  renegotiate  the  terms  of  those  loans 
and/or  relieve  himself  from  their  obligatioirs,  including  the  personal  guarantees.  As  part  of  that 
effort,  Cohen  made  a  series  of  representations  to  Sterling  and  Mehose  about  his  net  worth,  assets, 
avaUable  cash,  and  financial  outlook.  Specifically,  based  on  my  review  of  records  maintained  by 
Sterling  and  Mehose,  arrd  public  somces  concerning  the  taxr  industry  and  the  value  of  taxi 
medallions,  as  well  as  my  review  of  reports  prepared  by  law  enforcement  officers  of  interviews 
with  a  Sterling  executive  vice-pr’esident  (the  “Sterling  Employee-1”)  and  my  participatioir  in  an 
mtervrew  with  a  Sterling  employee  (the  “Sterling  Employee-2”),  I  have  learned,  among  other 
things,  the  following: 

a.  Taxi  medallioirs  are  small  metal  plaques  affixed  to  taxis.  Without  a  raedalliorr,  it 
is  illegal  to  operate  a  taxi  in  cities  witir  medallion  systems,  such  as  New  York  City.  Cohen  and  his 
wife  own  multiple  LLCs  that  collectively  own  32  taxi  medalMons  (each  LLC  owns  two 
medallions).^  Cohen’s  purchase  of  these  New  York  taxi  medallions  was  originally  financed  by 
loans  from  Capital  One  Bank,  for  which  the  medallions  serwed  as  collateral.  Cohen  was  not  a  taxi 
operator,  and  leased  his  medallions  to  a  third  parly.  That  third  party  made  morrthly  payments  to 

Cohen,  who  in  turn  used  some  of  those  proceeds  to  pay  his  monthly  payments. 

!  IV* 

b.  In  early  2014,  Cohen  became  a  customer  of  Sterling:  be  sought  to  refinance  a 

•  f 

mortgage  on  a  rental  property  that  he  owned.  In  or  around  April  2014,  Cohen  raised  with  Sterling 


2  One  of  tlrese  companies.  Mad  Dog  Cab  Corp.,  was  jointly  owned  by  Sondra  Cohen,  who  I 
believe  is  Cohen’s  mother. 
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the  prospect  of  refinancing  his  taxi  medallion  loans,  which  were  then  at  Capital  One  Bank.  By  in 
or  about  September  2014,  Cohen  began  negotiating  a  lending  transaction  with  Sterling  that  would 
allow  Cohen  to  pay  off  his  loans  at  Capital  One  and  borrow  more  money  from  the  then-increase  m 
value  of  the  medallions.  According  to  Sterling  Employee-1,  in  2014,  prior  to  the  recent  upheaval 
in  the  taxi  industry — as  a  result  of  the  emergence  of  ride-sharing  services,  such  as  Uber  taxi 
medallion  loans  were  viewed  by  banks  and  investors  as  safe,  shortterm  credits,  as  the  market  value 
of  taxi  medallions  was  consistently  rising.  Consequently,-  taxi  medallion  loans  like  the  loans  held- 
by  Cohen— were  frequently  refinanced  at  increasing  amounts  as  the  value  of  the  medallions  rose. 
According  to  Sterling  Employee-1,  boiTowers  typically  cashed  out  the  increase  in  the  loan  amount 
and  used  the  additional  funds  for  other  purposes.  Cohen  appears  to  have  followed  this  approach  in 
2014,  when  he  agreed  to  refinance  his  medallion  lo^  for  approximately  $22  million,  which 
according  to  letters  from  Capital  One  Bank  in  Sterling’s  files— was  greater  than  his  previous  debt 
at  Capital  One  Bank  ($21  million,  of  which  $14.6  miUion  was  a  line  of  credit  to  Cohen).  This 

allowed  Cohen  to  cash  out  the  proceeds  from  the  transaction. 

c.  Based  on  my  review  of  records  maintained  by  Sterling,  I  have  learned  that  on  or 
about  December  8,  2014,  each  of  Cohen’s  sixteen  taxi  medallion  corporations  entered  into  loan 
agreements  and  promissory  notes  with  Sterling  for  the  principal  sum  of  $  1,375,000,  with  repayment 
due  on  December  8, 2016.  Each  loan  was  signed  by  Michael  or  Laura  Cohen,  depending  on  who 
was  the  sole  shai'eholder  of  the  corporation.  The  loans  were  also  each  secured  by  a  security 
-  agreement,  dated  the  same  day,  making  the  medallions  collateral  for  the  notes.  To  give  Steilmg 
additional  secuiity,  Michael  and  Laura  Cohen  signed  personal  guarantees  and  confessions  of 
judgment,  giving  Sterling  the  right  to  puixue  collection  against  the  Cohens’  personal  assets  were 
their  corporations  to  default  under  the  loan  agreements.  In  total.  Sterling  agreed  to  lend 
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approximately  $22  million  to  the  Cohens’  companies.  Pursuant  to  participation  agreements, 
Sterling  ti-ansfeixed  45  percent  of  that  debt  to  Mehose.  ^  Under  the  terms  of  Sterling’ s  participation 
agreements  with  Melrose,  Sterling  was  precluded  from  amending  or  modifying  the  loans  without 
the  consent  of  Mekose. 

d.  fri  evaluating  Cohen’s  requested  refinancing  of  the  taxi  medallions.  Sterling  (and 
Mekose,  consistent  with  its  participation  in  the  deal)  conducted  diie  diligence.  At  Sterling  s 
request,  Cohen  provided  Sterling  with  a  statement  of  financial-condition,  dated  August -1,  2014 
(the  “August  2014  Financial  Statement”),  which  indicated  that  Cohen  had  $100,740,000  in  total 
assets,  $23,550,000  in  total  liabilities,  and  a  net  worth  of  $77,190,000.'^  From  my  review  of  a 
Sterling  credit  memorandum,  dated  September  29,  2014,  I  know  that  Sterling  viewed  the 
transaction  favorably  because,  accounting  for  loan  payments,  cash  flows  from  the  medallions  were 
projected  to  be  positive,  the  value  of  the  coUateral  (as  estimated  by  Sterling)  exceeded  $42  raUhon, 
and  the  net  worth  of  Cohen — ^who  was  the  direct  obligor  under  the  guarantee  agreements  ^was 
over  $77  million.  An  internal  Sterling  credit  and  risk  rating  analysis  report,  dated  October  20, 
2014,  recommended  approval  of  the  loans  for  substantially  the  same  reasons. 

e.  Based  on  my  review  of  records  maintained  by  Sterling  and  public  sources,  I  have 
learned  that  over  time,  the  collateral  bacldng  Cohen’s  loans  (taxi  medallions)  lessened  in  value  due 
to  the  rise  in  ride-sharing  companies  and  significant  devaluation  of  taxi  medallions.  Additionally, 
Cohen  began  falling  behind  on  loan  payments  to  Sterling  and  Melrose.  I  know  from  records 

—  maintained  by  Sterling  and  an  interview  with  Sterling  Employee-2  that,  begfruung  in  or  around  - 

^  Melrose,  which  had  a  business  principally  focused  on  taxi  medallion  loans,  is  now  in 
conservatorsliip  by  tire  National  Credit  Union  Admimstration  ( 'NCUA  ). 

'*  Cohen  subsequently  provided  Sterling  with  a  i-evised  statement  of  financial  condition,  also 
dated  August  1, 2014,  which  reported  assets  of  $99,420,000,  total  liabilities  of  $23,550,000,  and  a 
net  worth  of  $75,870,000. 
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September  2015,  Cohen  told  Sterling,  in  sum  and  substance,  that  the  individual  leasing  Cohen’s 
medallions  had  fallen  behind  in  maldng  payments  to  Cohen,  and  that  as  a  result,  the  monthly  cash 
flow  from  his  taxi  medallions  had  been  reduced,  leaving  him  witli  a  shortfall  of  approximately 
$16,000  each  month.  For  instance,  I  have  reviewed  an  email  from  Sterling  Employee-2,  dated 
September  9, 2015,  summarizing  a  call  'with  Cohen— which  according  to  the  email  and  toll  records 
for  Cohen’s  cellphone  occiured  on  September  8,  2015 — during  which  Cohen  told  Sterling 
'Employee-2,  in  sum  and  substance,  about  his  cash  flow  problems  and  a-monthly  shortfall  of 
approximately  $16,000.  In  that  same  email.  Sterling  Employee-2  commented  that  despite  Cohen’s 
statements,  his  personal  jBnancial  information  “indicatefd]  a  strong  ability  to  make  up  the  difference 
in  payments.”  Cohen,  however,  according  to  Sterling  Employee-2,  pushed  the  bank  for  a  reduction 
in  Cohen’s  monflily  payments. 

f.  From  my  review  of  records  maintained  by  Sterling  and  my  participation  in  an 
interview  with  Sterling  Employee-2, 1  have  learned  that  Cohen  and  Sterling  Employee-2  spoke 
again  on  September  28, 2015,  md  tiiat  during  tlie  call  Cohen  stated,  in  sum  and  substance,  that  the 
individual  to  whom  Cohen  leases  the  medallions  had  again  reduced  monthly  payments  to  Cohen.  I 
know  from  ray  review  of  records  maintained  by  Sterling  diat  between  in  or  about  September  2015 
and  November  2015,  Sterling  raised  the  possibility — ^both  iotemally  and  with  Cohen  of  Cohen 
posting  his  real  estate  holdings,  personal  residence,  or  some  other  collateral  as  additional  security 
for  the  banks.  According  to  these  records,  however,  Cohen  resisted  these  requests.  From  my  review 
of  loan  documents  and  records  maintained  by  Sterling,  I  know  that  in  or  about  November  2015,  as 
a  result  of  Cohen’s  representation  that  he  was  not  earning  sufScient  returns  on  his  medallions  to 
cover  monthly  interest  payments.  Sterling  and  Melrose  agreed  to  amend  then  loans  with  Cohen  by. 
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among  other  things,  reducing  the  interest  rate  Cohen  paid  to  Melrose  and  extending  the  loan 
maturity  date  to  December  8, 2017. 

g.  I  know  from  interviews  with  Sterling  Employee-1  and  Sterling  Employee-2,  as  well 

as  emails  I  have  reviewed,  that  in  or  about  October  2016,  Cohen  told  Sterling  Employee-1  that 
Cohen  had  a  potential  buyer  of  his  taxi  medallions,  named^^^^^^^|  who  would  agree  to 
assume  Cohen’s  debt  with  Sterling  and  Mehose.  Based  on  my  review  of  records  maintained  by 
Sterling,  as  well  as  the  interviews  with  Sterling  Employee-1  and  Stei'ling  Bmployee-2  referenced 
above,  Ilcnowthat  by  or  before  October  2016,  Cohen  had  entered  into  negotiations  to  sell  his  sixteen 
coiporate  taxi  medallions  to  who  is  a  medallion  owner  and  taxi  operatoi,  for  the 

balance  of  the  loans,  which  at  the  time  was  $21,376,000.  I  know  from  my  review  of  records 
maintained  by  Sterling,  and  my  participation  in  an  interview  with  Sterling  Employee-2,  that  as  a 
condition,  of  the  transfer  of  the  medalhon  loans — and  because  Sterling  was  unfamihar  ’Witl^^^^f 
^^^^H-Sterling  requested  that  Cohen  make  a  substantial  principal  payment  on  the  loan,  of 
approximately  one  million  dollars,  prior  to  the  transfer.  Cohen  rejected  this  request  initially.  But 
on  or  about  January  3 1, 2017,  Cohen  told  Sterling  Employee-1,  in  sum  and  substance,  that  he  would 
malce  a  one  million  dollar  principal  reduction  payment  m  order  to  move  foiwai-d  with  the  medallion 
transfer  deal  witl^^^^^|  Indeed,  m  an  email  sent  frora  the  Cohen  Account  to  Sterling 
Employee-2  on  or  about  February 22, 2017,  Cohen  confirmed  that  he  “agreedto  pay  down  1  million 
from  the  loan  amount.” 

h.  Pursuant  to  the  participation  agreements  between  Sterling  and  Mehose,  Sterling 

was  required  to  secure  Mehoso’s  agreement  to  participate  in  the  transfer  of  the  taxi  medallion  debt 
from  Cohen  to  or  about  April  17,  2017,  Sterling  sent  a  memorandum  to 

Mehose  summarizing  the  terras  of  the  proposed  transaction,  and  noting  the  requu’ement  that 
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Melrose  agree  to  the  terms.  On  or  about  May  2,  2017,^^^^^|^|emailed  Sterling 
Employee-1  fiom  the  l^^mm^ccount  to  inquire  about  the  status  of  the  transaction. 

Employee-1 

Melrose  had  agieed  to  the  deal,  and  that  SterUng  would  be  sending^^^^^^Btei^  sheet 

e 

shortly. 

i.  In  order  for  the  banks  to  evaluate  the  proposed  transaction  fully,  they  requested 
financial  information  from  the  parties.  On  or  about  October  26, 20 16,  a  Sterling  employee  emailed— 
tj^g^^^^^^^Account  about  the  “Cohen  Medallion  Purchase,”  and  stated  “[i]n  order  to 
proceed  witli  the  assumption  of  Michael’s  loans,”  Sterling  needed  certain  financial  information 

^(^^^^^^^^^^Account,  that  he  would  send  a  financial  statement  and  tax 
returns  shortly.  AddhionaUy,  on  or  about  June  7,  2017,  Sterling  Employee-1  emailed  Cohen  to 
request  an  "updated  personal  financial  statement,”  completed  jointly  with  Cohen’s  wife,  and 
Cohen’s  most  recent  federal  income  tax  return.  On  or  about  June  8, 2017,  Cohen  emailed  Sterling 
Employee-1  from  the  Cohen  Account,  attaching  a  Sterling  personal  financial  statement  foim  that 
had  been  filled  out  by  hand,  which  referenced  a  statement  of  financial  condition,  dated  May  1, 
2017  (the  “May  2017  Financial  Statement”),  that  was  also  attached.  The  May  2017  Fmancial 
Statement  included  a  cover  letter  from  Cohen’s  accountant,  Jeffiey  Getzel,  stating,  in  sum  and 
substance,  that  the  information  in  the  statement  came  fr-om  Cohen  and  that  Getzel  had  not 
confimed  its  accuracy  or  completeness.  The  May  2017  Financial  Statement  stated  that  Cohen  had 
total  assets  of  $41,955,000,  total  liabilities  of  $39,130,000,  and  a  net  worth  of  $2,825,000.  The 
May  2017  Financial  Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  m 
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cash,  $26,155,000  in  closely  held  companies  (such  as  the  taxi  medaUion  entities  and  his  real  estate 
holdings),  $3,200,000  in  real  estate  investments,  and  his  $1 1,000,000  personal  residence. 

j.  Based  on  my  review  of  reports  of  law  enforcement  interviews  of  Sterling 


Employee-1, 1  have  learnedlhat  Sterling  Employee-1  reviewed  each  hne  of  the  May  2017  Financial 
Statement  with  Cohen  to,  among  oier  things,  verify  its  accuracy,  and  Sterling  Employee-1  asked 
Cohen  about  the  cash  amount  listed  on  the  May  2017  Financial  Statement.  Cohen  stated  to  Sterling 
Employee=l,  in  sum  and  substance,  that  the  May  2017  Fmancial  Statement  was  accurate. 

k.  On  or  about  August  16,  2017,  Sterling  Bmployee-1  emailed  Cohen  at  the  Cohen 


at  the^^^^^^^^^lAccotint,  attaching  a  non-binding  term 


Account  and 


sheet  memorializing  the  potential  transaction  between  Sterling,  Mehnse,  Cohen,  and 


On  or  about  August  29,  2017, 


|imailed  Sterling  Employee-1  from  the| 

and/or 


Account,  requesting  that  he  be  included  on  “all  fiiture  e-mails  ttl 

concerning  this  matter,”  and  providing  proposed  edits  to  the  term  sheet.  On  or  about 
August  30,  2017,  Stei-ling  Employee-1  emailed  ||m|^H||mat  the 
Account,  Cohen  at  the  Cohen  Account,  the^^Ucount,  and  provided  them  with  a 

revised  temi  sheet.  On  or  about  September  5, 2017,  Sterling  Employee-1  sent 
at  the^^^^^^^^  Account,  Cohen  at  the  Cohen  Account,  an| 
copy  of  the  executed  term  sheet.  According  to  the  term  sheet,  | 

$20,000,000  from  Sterling  and  Melrose,  to  be  secured  by  the  medalhons  thalj 
acquire  fi:om  Cohen. 

1.  As  part  of  the  agreement,  according  to  the  term  sheet,  $ 1 ,265,9 1 3  in  principal  (which 
is  what  would  lemain  after  the  $20,000,000  payment  on  the  outstanding  loan  balance)  would  be 


repaid  by  Cohen  and  the  two  banks,  witli  Cohen  paying  fifty  percent  and  the  banks  dividing  the 
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remaining  half  of  the  balance.  Based  on  my  review  of  an  internal  Sterling  credit  memorandum, 
dated  October  4, 2017,  the  partis  reached  a  preliminary  agi  eement  that  Cohen  would  pay  $632,956 
of  the  remaining  $1,265,912  principal  loan  balance,  and  Sterling  and  Melrose  would  absorb 
$357,167  and  $275,789  respectively  in  the  form  of  charge-offs.  According  to  Sterling  Employee- 
1,  Sterling  was  willing  to  divide  the  repayment  of  the  outstanding  principal  balance— despite  its 


prior  insistence  that  Cohen  make  a  principal  pay-down  of  at  least  one  million  dollars— because 
"Cohen  represented  on  atelephone  call  with  Sterling  Employee-1,  in  sum  and  substance,  that  he  had 
insufficient  liquidity  to  pay  the  fidl  outstanding  principal  balance.  As  part  of  the  agreement.  Sterling 
and  Melrose  also  agreed  to  relieve  Cohen  and  his  wife  of  the  personal  guarantees  that  they  made 

Iransaction,  Cohen  would  no  longer 


on  behalf  of  the  LLCs.  Thus,  after  completing  thi| 
have  had  any  outstanding  obligations  to  Sterling  or  Mekose. 

m.  Based  on  my  review  of  emails  sent  by  Sterling  employees,  I  have  learned  that 
because  the  transaction  between  the  parties  was  subject  to  full  credit  underwriting  by  Sterling  and 
Mekose  (as  well  as  Mekose’s  regulators  at  NCUA),  in  August  and  September  2017,  Sterling 
requked  and  requested  additional  financial  statemaits  for  Cohen  and 
underwriting  process.  In  response  to  Sterling’s  requests,  on  or  about  October  5,  2017, 


for  its  ciudit 


lait  from  the 


[Account  to  a  Sterling  employee  a  copy  of  I 


personal  financial  statement.  The  financial  statement  lists  the 


Account  as  the  email  contact  fo;| 


Additionally,  on  or  about  October  5,  2017, 


Cohen,  using  the  Cohen  Account,  re-sent  Sterling  Employee-2  a  copy  of  his  May  2017  Financial 
Statement.  A  day  later,  on  October  6,  2017,  Cohen,  using  the  Cohen  Accoimt,  emailed  Sterling 
Employee-2  a  statement  of  financial  condition,  dated  September  30,  2017  (tte  “September  2017 
Financial  Statement”). 


’  16 
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n.  Like  the  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
included  a  cover  letter  from  Jeffi-ey  Getzel,  Cohen’s  accountant,  stating,  in  sum  and  substance,  that 
the  information  in  the  statement  came  firom  Cohen,  and  that  Getzel  had  not  confirmed  its  accuracy 
or  completeness,  llte  September  2017  Financial  Statement  stated  that  Cohen  had  total  assets  of 
$33,430,000,  total  liabilities  of  $45,630,000,  and  a  negative  net  worth  of  $12,200,000.  Notably, 
unlilfPi  Cohen’s  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
represented  to  Sterling  that  Cohen  had  a  negative  net  worth.  The  September  2017-FinanciaI 
Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in  cash,  $17,630,000  in 
closely  held  companies  (.such  as  the  taxi  medallion  entities  and  his  real  estate  holdings), 
$3,200,000  in  real  estate  investments,  and  his  $11,000,000  personal  residence  (which,  for  the  first 
time,  he  indicated  was  held  in  trust).  iTie  September  2017  Financial  Statement  included  assets  and 
liabilities  not  held  in  Cohen’s  name,  such  as  various  entities  associated  with  his  taxi  medallions  and 
some' of  his  real  estate  investment  entities. 

0.  From  my  participation  in  an  interview  with  Sterling  Employee-2,  and  my  review  of 
records  maintained  by  Sterling,  I  have  also  learned  that  at  or  around  the  time  Cohen  pfovided 
Sterling  with  these  financial  statements— in  or  around  September  2017— Cohen  stopped  paying 
monthly  loan  payments  on  his  taxi  medallion  loans  altogether.  According  to  Sterling  Employee- 
2,  Cohen  informed  Sterling,  in  sum  and  substance,  that  he  had  insufficient  funds  to  pay  the  monthly 
principal  and  interest  payments  on  his  medallion  loans.  By  in  or  about  December  2017,  Sterling 
and  Melrose  had  not  been  paid  approximately  $276,937.92  in  monthly  principal  and  interest 
payments  on  the  medallion  loans.  Based  on  Cohen’s  financial  condition  as  conveyed  in  the 

^Notably,  the  September  2017  Financial  Statement  valued  each  of  Cohen’s  thirty-two  New 
York  taxi  medallions  at  approximately  $180,187.50,  whid^^^^msiderably  less  than  the 
$650,000  valuation  ascribed  to  each  medallion  in  the  Cohen-^^^^^tem  sheet. 
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September  2017  Financial  Statement,  and  his  delinquency  in  making  payments  to  Sterling,  among 
other  things,  the  bank’s  credit  underwriting  committee  determined  (and  memorialized  in  a 
December  2017  memorandum)  that  the  Cohen-^^^^Jtransaction  was  favorable  for  the  banlc 
-  that  is,  that^^^^^would  be  a  better  borrowei-  than  Cohen. 

p.  On  or  about  December  26,  2017,  Sterling  sent  Cohen  a  demand  letter  requesting 
the  immediate  receipt  of  past-due  loan  payments.  On  December  29, 2017,  Sterling  sent  Cohen  a 
letter  stating  that  he  was  in  default  under  the  loans  between  Sterling  and  Cohen’s  medallion 
corporations.  Cohen  did  not  make  dn  immediate  payment  on  the  loans,  but  instead  sent  an  e-mail 
to  Sterlhig  Employee-1  on  or  about  January  24, 20 1 8,  from  the  Cohen  Account,  stating  that  during 
the  closing  of  the  Cohen^^^|i  transaction,'  Cohen  would  “bring  all  payments  up  to  date  as 
weU  as  deposit  the  payoff  differential.”  Cohen  also  requested  by  email  sent  from  the  Cohen 
Account  on  January  24,  2018,  that  at  the  closing  of  the  Cohen^^^^^^ansaction,  Sterling 
provide  a  letter  stating  that  all  of  Cohen’s  debts  have  been  satisfied  and  that  Cohen  s  personal 
guarantees  of  the  medallion  loans  had  been  terminated. 

q.  The  CoheD^^^^^|ransaction,  however,  did  not  close.  On  or  about  January 
29, 2018,^^1  the  ^^^^^^|attom6y,  emailed  attorneys  for  Sterling  from  fiie^^H^ccount 
and  stated  that  "at  this  time  there  is  no  deal  with  Michael  Cohen.  Some  of  the  numbers  have 
changed  and  we  are  not  prepai'ed  to  go  forward.” 

r.  Based  on  my  participation  in  the  interview  with  Sterling  Employee-2  and  my 
review  of  records  maintained  by  Sterling,  I  know  that  after  the  Cohei^^^^^^deal  fell  apart. 
Sterling  assigired  Cohen’s  loans  to  an  employee  at  Sterling  who  specializes  in  collecting  on 
defaulting  loans  ("Sterling  Employee-3”).  From  my  review  of  telephone  call  notes,  I  know  that 
Sterling  Employee-3  spoke  to  Cohen  on  or  about  January  30,  2018  about  paying  dowrr  and/or 
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restructuring  Cohen’s  outstanding  taxi  medallion  loans.  Based  on  my  review  of  an  email  between 
Sterling  Employee-3  and  Cohen,  I  know  that  on  the  January  30,  2018  call,  Cohen  stated  that  he 
would  send  a  “corrected  cuirenf  ’  version  of  his  personal  financial  statement.  Following  that  call, 
on  or  about  January  31,  2018,  Cohen  emailed  Sterlmg  Employee-3  from  the  Cohen  Account  a 
copy  of  the  September  2017  Financial  Statement.  Later  that  day,  Cohen  again  emailed  Sterling 
Employee-3  from  the  Cohen  Account  and  proposed  paying  $500,000  to  bring  the  loans  current 
—and  $750,000  to  bring  the  principal  balance  to  $20,500,000.-  Cohen  also  suggested  revised  monthly 
interest  payment  amounts.  On  or  about  January  31,  2018,  Sterling  Employee-3  responded  to 
Cohen  at  the  Cohen  Account  and  stated,  in  sum  and  substance,  that  Cohen  would  need  to  pay  the 
entirety  of  the  overdue  payments  and  pay  down  the  principal  balance  of  the  loan  to  $20,000,000 
(in  total,  a  payment  of  approxunately  $1,750,000),  and  wouldneedto  make  larger  monthly  interest 
payments. 

s.  On  or  aboutFebruary  1, 2018,  Cohen  emailed  Sterling  Employee-3  from  the  Cohen 
Account  and  proposed  “[pjayment  of  $1.250m  which  ALL  can  be  used  to  pay  down  principal,  if 
[Sterling]  will  waive  past  due  amounts,”  but  stated  “I  do  NOT  have  more  than  the  $  1,250m. 
(Emphasis  in  original.)  Cohen  also  stated,  in  sum  and  substance,  that  he  had  insufficient  financial 
resources  to  post  additional  collateral  or  pre-fund  montldy  payments.  Based  on  my  participation 
in  an  inteiwiew  with  Sterling  Employee-2, 1  have  learned  that  Sterling  continues  to  renegotiate  the 
medallion  loans  with  Cohen  based  on  Cohen’s  representations  about  his  cuirent  financial  position. 
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C.  Cohen  Made  Material  Misrepresentations  About  His  Finances  to  Banks 

Cohen  Concealed  from  Sterling  and  Melrose  Cash  Derived  from  Consulting  W ork 

15.  As  set  forth  in  detail  below,  despite  multiple  representations  by  Cohen  to  Sterling  (and, 
by  extension,  Mehnse®)  that  he  had  insufficient  funds  to  pay  down  the  principal  balance  of  the 
medaUion  loans,  make  monthly  interest  payments,  or  pay  past-due  amounts,  it  appears  that 
between  2016  and  the  present,  Cohen  opened  and  maintained  bank  accounts  at  First  Republic  Bank 
(-Tirst  Republic-’),  and  then  received  millions  of  dollars  in  purported  consulting  payments  in  these-  - 
accounts,  which  he  did  not  disclose  to  Sterling.  Cohen  set  up  these  accounts  and  received  these 
funds  during  the  very  period  in  which  he  made  disclosures  to  Sterling  about  his  personal  finances 
(including  his  assets  and  liabilities)  and  his  ability  to  make  payments  on  the  medaUion  loans.  In 
these  disclosures  to  Sterling — ^and  despite  being  asked  about  these  bank  accounts  by  his 
accountant — Cohen  withheld  information  about  liquid  financial  assets  at  Fii’st  Republic. 

16.  Specifically,  based  on  my  review  of  documents  and  bank  records  produced  pm-suant  to 
a  subpoena  by  First  RepubUc,  and  my  participation  in  and  review  of  reports  of  interviews  with  two 
Finst  Republic  employees,  I  have  learned,  among  other  things,  die  foUowing: 

a.  Cohen  and  his  wife  have  been  customers  of  First  Republic  since  approximately 
June  2011.  Cohen  controls  several  checking  and  loan  accounts,  some  in  his  own  name  and  others 
in  the  names  of  corporate  entities. 


®  Based  on  my  review  of  a  report  of  an  interview  conducted  with  an  employee  of  Melrose,  I 
have  learned  that,  pursuant  to  the  participation  agreement  between  Sterling  and  Melrose,  Cohen’s 
financial  statements  and  other  records  in  Sterling’s  possession  ware  forwarded  to  Mehoses^^ 
Meh'ose  could  make  a  determination  as  to  whether  to  approve  of  the  Coher^^^^^^^^ 
transaction.  Based  on  my  review  of  reports  of  interviews  with  Melrose  employees,  I  also  know 
that  Cohen  called  employees  at  Mehose  regardingthe  Coher|  "  "  ' 


I  transaction. 
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b.  On  or  about  October  26,  2016,  in  Manhattan,  New  York,  Cohen  opened  a  new 
checking  accoaiGt  at  First  Republic  in  tlie  name  of  Essential  Consultants  LLC  (the  “Essential 
Consulfants’AGOOiWt”).  Cohen  was  the  only  autliorized  signatory  on  the  account  When  Cohen 
opened  the  Essential  Consultants  Account,  a  Fhst  Republic  employee  (“First  Republic  Employee- 
1”)  conducted  an  in-person  interview  of  Cohen.  In  response  to  a  series  of  know-your-customer 
questions’  about  the  purpose  of  the  account— the  answers  to  which  First  Republic  Employee-1 
entered  into  a  form® — Cohen  stated,  in  sum  and  substance,  that  he  was  opening  Essential 
Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting  work, 
and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States.  Cohen 
also  stated,  in  sum  and  substance,  that  his  purpose  in  setting  up  the  account  was  to  keep  th,e  revenue 
from  his  consulting  business— which  he  said  was  not  his  main  source  of  income— separate  fi-om 
his  personal  finances.  As  set  forth  below,  there  is  probable  cause  to  believe  that  Cohen’s 
statements  about  the  intended  purpose  of  the  accoimt  and  source  of  funds  for  the  account  were 
false.  Specifically,  the  account  was  not  intended  to  receive — and  does  not  appear  to  have 
received — ^money  in  connection  with  real  estate  consulting  work;  in  addition,  the  account  has 

received  substantial  payments  from  foreign  sources. 

c.  Filst,  on  or  about  October  27,  2016— the  day  after  he  opened  the  Essential 
Consultants  Account,  Cohen  used  the  account  to  wire  $130,000  to  an  account  held  in  the  name  of 
attorney  Keith  Davidson’s  lawfiim.  Based  on  my  review  of  emails  between  Cohen  and  Davidson, 


’  Certain  financial  institutions  are  required  to  conduct  such  procedures  pursuant  to  tlie  Bank 
Secrecy  Act  and  its  implementing  regulations.  iSee  31  U.S.C.  §  5318;  31  C.F.R.  §  1020.220. 

« FirstRepublic  Employec-1  first  filled  outthe  form  on  the  day  he  interviewed  Cohen,  October 
26,  2016.  On  or  about  December  19,  2016,  at  the  request  of  bank  compliance  personnel.  First 
Republic  Employee-1  updated  the  form  to  add  more  detail  about  Cohen  s  statements. 
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obtained  pursuant  to  the  Prior  Cohen  Account  Warrants,  I  believe  that  this  payment  did  not  relate 
to  any  real  estate  consulting  work,  but  ratlier  was  a  “settlement”  payment  made  to  Davidson  s 
client  ®  Based  on  my  review  of  public  soiuces,  I  have  learned  that  Davidson’s  client  is  alleged  to 
have  had  an  extramarital  affair' with  Donald  Tnunp.  On  or  about  February  13,2018,  Cohen  made 
a  public  statement  that  “[i]n  a  private  transaction  in  2016,  I  used  my  own  personal  funds  to 
facilitate  a  payment  of  $130,000  to  [Davidson’s  client].” 

^  d.  Second,!  know  from  my  review  of  Fust  Republic  bankrecords  that  were  scheduled 
by  an  FBI  forensic  accountant  that  after  Cohen  opened  the  Essential  Consultants  Account,  Cohen 
received  payments  into  that  account  from  foreign  businesses  and  entities  that  do  not  reflect  the 
stated  client  profile  for  the  residential  and  commercial  real-estate  consulting  services.  Specifically, 
from  my  review  of  the  Essential  Consultants  Account  schedule  and  public  sources,  I  know  tire 
following: 

i,  Beghuiing  on  or  about  January  31,  2017,  Cohen  began  receiving  monthly 
payments  of  $83,333  from  an  entity  called  Columbus  Nova  LLC,  which  were  deposited  into  the 
Essential  Consultants  Account.  According  to  public  sources,  Columbus  Nova  is  an  investment 
management  firm  controlled  by  Renova  Group,  an  industrial  holding  company  based  in  Zurich, 
Switzerland  that  is  controlled  by  Russian  national  Viktor  Vekselberg.  From  January  2017  to 
August  2017,  the  Essential  Consultants  Account  received  seven  payments  totaling  $583,332.98 
from  Columbus  Nova  LLC. 


®  Specifically,  I  have  learned  from  my  review  of  bank  records  that  on  or  about  October  26, 
2016,  Cohen  transferred  $131,000  fiom  a  home  equity  Ime  of  credit  account  at  First  Republic  to 
the  Essential  Consultants  Account;  on  or  about  October  27,  2016,  Cohen  transferred  $130,000 
from  the  Essential  Consultant  Account  to  an  account  held  in  the  name  of  Davidson’s  law  firm  at  a 
bank  based  in  Los  Angeles;  and  on  or  about  November  1, 2016,  a  wire  transfer  in  the  amount  of 
approximately  $96,645  was  made  from  Davidson’s  account  to  a  banlc  account  in  the  name  of 
Davidson’s  client. 
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ii.  Beginning  on  or  about  April  5, 2017,  Cohen  began  receiving  payments  from 
Novartis  Investments,  SARIj,  which  I  believe  to  be  the  in-house  financial  subsidiary  of  the  Swiss 
pharmaceutical  company  Novartis  International  AG  (“Novartis”).  Between  April  2017  and  Januai7 
2018,  the  Essential  Consultants  Accoimt  received  ten  wire  payments  from  a  Swiss  bank  account 
held  in  the  name  of  Novartis,  each  in  the  amount  of  $99,980,  for  a  total  of  $999,800. 

iii.  Beginning  in  or  about  April  20 1 7,  the  Essential  Consultants  Account  started 
receiving  wire  payments  from  a  bank  account  associated'with  the  telecommumcations  company 
AT&T  Inc.  (“AT&T”).  Specifically,  on  or  about  April  14,  2017,  AT&T  wired  $100,000  to  the 
Essential  Consultants- Account  and,  from  in  or  about  June  2017  to  in  or  about  January  2018,  the 
Essential  Consultants  Account  received  nine  $50,000  payments  from  AT&T.  In  total,  AT&T  wired 
$550,000  to  the  Essential  Consultants  Account. 

iv.  On  or  about  May  10, 2017,  June  9, 2017,  July  10, 2017,  and  November  27, 
2017,  the  Essential  Consultants  Accormt  received  fom  deposits  in  the  amount  $150,000  (totaling 
$600,000)  from  a  bank  account  in  South  Korea.  The  account  holder  from  which  the  money  was 
sent  is  Korea  Aerospace  Industries  Ltd.  (“KAI”).  KAI  is  a  South  Korea-based  company  that 
produces  and  sells  fixed-wing  aircraft,  helicopter  aircraft,  and  satellites  to  the  United  States 
Department  of  Defense,  among  other  customers. 

V.  On  or  about  May  22,  2017,  the  Essential  Consultants  Account  received  a 
$150,000  deposit  from  an  account  at  Kazkommertsbank,  a  Kazakhstani  banlc.  The  listed  account 
holder  at  Kazkommertsbank  was  a  second  Kazakhstani  bank  named  BTA  Bank,  AO.  A  message 
accompanying  tlie  wire  payment  indicated  that  the  payment  was  a  “monthly  consulting  fee  as  per 
Inv  BTA-101  DD  May  10,  2017  consulting  agreement  W/N  DD  08  05  2017  CNTR  W/NDD 
08/05/2017.” 
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vi.  In  total,  from  on  or  about  January  31, 2017  to  on  or  about  January  10, 2018, 
the  Essential  Consultants  Account  received  approximately  $2,883,132.98  in  transfers  and  checks 
from  the  aforementioned  entities.  As  of  on  or  about  January  1 0, 201 8,  the  balance  in  the  Essential 
Consultants  Account  was  $1,369,474.23. 

e.  On  or  about  April  4,  2017,  Cohen  opened  another  new  checking  account  at  First 
Republic,  this  one  in  the  name  of  Michael  D.  Cohen  &  Associates,  P.C.  (the  "MDC&A  Account”). 
Cohen  was  the  only  authoi-ized'signatory^n  the  account.  Among  other  things,  the  MDC&A 


Account  received  ten  wire  transfers  and  one  check  ftom  an  account  in  the  name  of  Squire  Patton 
Boggs,  a  law  firm.  In  total,  from  on  or  about  April  5,  2017,  to  on  or  about  January  2,  201 8,  the 
MDC&A  Accoimt  received  $426,097.70  in  deposits,  and  the  balance  in  the  account  as  of  January 
2, 2018,  was  $344,541.35.  As  discussed  below,  Cohen  never  disclosed  any  of  the  balance  in  the 
Essential  Consultants  or  MDC&A  accomits  to  Sterling  durmg  the  negotiations  with  respect  to  the 
Itransaction,  including  in  his  May  2017  Financial  Statement  and  September  2017 
Financial  Statement. 

17.  Based  on  my  review  of  emails  fium  the  Cohen  Account  that  were  seized  pursuant  to 
the  Prior  Cohen  Account  Wairants,  and  my  review  of  reports  of  interviews  with  employees  of 
AT&T  and  Novartis,  it  appears  that  the  aforementioned  payments  to  the  Essential  Consultants 
Account  and  MDC&A  Account  ostensibly  were  for  political  consulting  work,  including  consulting 
for  international  clients  on  issues  pending  before  the  Trump  administration. Specifically,  from 
my  review  of  emails  from  the  Cohen  Account  and  public  sources,  I  have  learned  the  following: 


Based  on  my  review  of  public  sources,  I  have  learned  that  Cohen  is  not  registered  as  a 
lobbyist  or  as  a  person  acting  as  an  agent  of  foreign  pi'incipals,  as  may  have  been  required  by  the 
Foreign  Agents  Registration  Act 
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a.  On  or  about  April  28,  2017,  Cohen  sent  an  email  from  tlie  Cohen  Account  to  an 
individual  whom  I  believe  is  affiliated  with  KAI.  In  the  email,  Cohen  attached  a  document 
pmporting  to  be  a  “Consulting  Agreemenf  *  between  KAI  and  Essential  Consultants  dated  as  of 
about  May  1, 2017.  The  document  indicates  that  Essential  Consultants  would  render  “consulting 
and  advisory  services,  as  requested”  by  KAI,  and  that  KAI  would  pay  Essential  Consultants  “a 
consulting  fee  of  One  Million  Two  Hundred  Thousand  ($1,200,000.00)  US  Dollars,”  disbmsed 
through  eight  $150,000  installments  between  May  2017  and  December  2017. 

b.  On  or  about  May  10, 2017,  Cohen  sent  an  email  fiom  an  alternate  email  address, 
copying  the  Cohen  Account,  to  an  employee  of  BTA  Bank.  To  the  email,  Cohen  attached  an 
invoice  to  BTA  Bank  in  the  name  of  Essential  Consultants.  The  invoice  contemplated  a  $150,000 
payment  to  Essential  Consultants  for  a  “monthly  consulting  fee.” 

c.  On  or  about  February  13, 2017,  Cohen  emailed  an  AT&T  employee  fiom  the  Cohen 
Account  what  appears  to  be  a  consulting  agreement,  which  contemplates  that  Essential  Consultants 
“shall  render  consulting  and  advisory  services  to  [AT&T]”  and  that  AT&T  would  “advise  [Essential 
Consultants]  of  those  issues  and  matters  with  respect  to  which  AT&T  Services  desires  [Essential 
Consultants] 's  assistance  and  advice.”  The  contract  calls  for  AT&T  “to  pay  the  Consultant  for  lus 
services  ...  a  consulting  fee  of  Fifty  Thousand  ($50,000)  Dollars  . . .  per  month.”  Based  on  my 
review  of  reports  of  interviews  witli  AT&T  employees,  I  have  learned  that  AT&T  retained  Cohen 
to  consult  on  political  issues,  including  net  neutrality,  the  merger  between  AT&T  and  Time  Warner, 
and  tax  reform, 

d.  On  or  about  January  17, 2017,  Cohen  emailed  to  a  representative  of  Novartis  from 
the  Cohen  Account  a  contract  between  Novartis  and  Essential  Consultants,  which  provides  tlrat 
Essential  Consultants  will  “provide  consulting  and  advisory  services  to  Novartis  on  matters  that 
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relate  to  the  repeal  and  replacement  of  the  Affordable  Care  Act  in  the  US  and  any  other  issues 
mutually  agreeable  to  [Essential  Consultants]  and  Novartis.”  The  contract  provides  for  a 
“consulting  fee  of  One  Million  Two  Hundred  Thousand  ($1,200,000)  US  dollars,”  to  be  paid  to 
Essential  Consultants  in  even  monthly  installments  over  the  course  of  a  year-.  Based  on  my  review 
of  reports  of  interviews  with  Novartis  employees,  I  haVe  learned  that  Novartis  retained  Cohen  to 
provide  political  consulting  services  and  to  gain  access  to  relevant  policymakers  in  the  Trump 

Administration.  ^ 

e.  On  or  about  April  3,  2017,  Squire  Patton  Boggs,  a  law  firm,  amrounced  on  its 
website  that  is  had  formed  a  “strategic  alliance”  with  Michael  D.  Cohen  &  Associates  and  wovdd 
“jointly  represent  clients.” 

18.  Despite  the  sigrrificant  amoimt  of  money  that  Cohen  received  into  the  Essential 
Consultants  Account  and  the  MDC&A  Accormt,  and  the  cash  balance  in  both  accounts,  Cohen  did 
not  disclose  that  infoimation  to  Sterling  or  Melrose.  Specifically,  based  orr  my  review  of  docrrments 
provided  by  Getzel,  and  my  review  of  notes  anc| 
have  learned  the  following: 

a.  hr  or  about  May  2017,  Getzel  met  witlr  Cohen  at  a  law  firm  in  Manhattan,  New 

York.  At  the  meeting,  Cohen  told  Getzel,  in  sum  and  substance,  that  he  bad  set  up  a  law  practice 

.|r 

called  Michael  D.  Cohen  &  Associates  PX!l,  ait(}:  a  consirlting  company  called  Essential  Consultants 
LLC.  Cohen  told  Getzel,  in  sum  and  substance,  that  he  expected  to  earn  $75,000  per  month  in 
connection  with  his  law  practice,  and  that  he  expected  gross  reverrues  for  the  consulting  business  to 
be  between  five  and  six  million  dollars  armually. 

b.  hr  or  about  October  2017,  if  not  earlier,  Getzel  was  preparing  a  personal  financial 
statement  for  Cohen.  On  or  about  October  6,  2017,  Getzel  sent  an  email  to  Cohen  at  the  Cohen 
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Account  in  which  Getzel  wrote  that  “[ajttached  is  a  draft  of  the  new  PFS  as  of  September  30, 2017” 
and  attached  a  draft  of  the  September  2017  Financial  Statement.  The  di-aft  statement  reflected  that 
as  of  September  30,  2017,  Cohen  had  only  $1,250,000  in  cash,  total  assets  of  approximately 
$33,430,000  (comprised  of  taxi  medallion  interests,  real  estate  interests,  and  his  personal  residence 
and  property),  and  liabilities  of  approximately  $45,630,000,  leaving  him  purpoitedly  over  $12 
million  in  debt.  In  the  same  email,  Getzel  questioned  Cohen,  in  sum  and  substance,  about  the  fact 
that' the  financial  statanent  did  not  list  any  assets  associated  with  either  the  Essential  Consultants 
Account  or  the  MDC&A  Account:  “[w]e  did  not  add  any  value  for  you[r]  two  operating  entities  - 
Michael  D.  Cohen  &  Associates  POC  [.sic]  and  Essential  Consultants  LLC.  Please  advise  whether 

or  not  tliese  should  be  disclosed  and  what  value.” 

0.  On  or  about  October  6, 201 7,  Cohen  called  Getzel  by  telephone— which  is  reflected 
on  toll  records  for  Cohen’s  cellphone— and  told  Getzel,  in  sum  and  substance,  not  to  include 
Essential  Consultants  or  MDC&A  in  the  September  2017  Financial  Statement  because  they  had  no 
value. 

d.  On  or  about  October  6, 2017,  following  the  call  with  Getzel,  Cohen,  using  the  Cohen 
Account,  responded  to  Getzel’s  email  with  the  answer  *‘[l]ooks  good  to  me.  Cohen  never  directed 
Getzel  to  make  any  changes  to  his  cash  position  as  listed  in  the  September  2017  Financial 
Statement.  Neither  Essential  Consultants  nor  MDC&A  was  listed  on  the  September  2017  Financial 
Statement  that  was  provided  to  Sterling. 

19.  Based  on  the  foregoing,  and  finm  my  review  of  banlc  records  and  emails  sent  by  Cohen 
to  Sterling,  I  Icnow  that  the  September  2017  Financial  Statement  made  no  mention  whatsoever  of 
assets  that  Cohen  held  in  the  Essential  Consultants  Accoiuit  or  the  MDC&A  Account.  As  of 
September  30,  2017— the  date  of  the  September  2017  Financial  Statement— Cohen  had 
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approximately  $673,729.95  in  the  Essential  Consultants  Account  and  $248,619,28  in  the  MDC&A 
Accoimt.  As  of  October  6, 2017,  tlie  date  when  Getzel  asked  Cohen  about  the  two  accounts,  Cohen 
had  approximately  $823,709.95  in  tlie  Essential  Consultants  Account  and  .$248,619.28  in  the 
MDC&A  Account. 

Cohen  Understated  His  Available  Cash 

20.  In  addition  to  withholding  the  existence  of  the  Essential  Consultants  Account  and  the 
MDC&A  Account  from  Sterling  and  Melrose,  it  appear  s  that  Cohen  also  substantially  understated 
his  available  cash  and  cash  equivalents  in  his  financial  disclosures.  Specifically,  I  know  fi'om  my 
review  of  the  September  2017  Financial  Statement  that  Cohen  provided  to  Sterling  that  Cohen 
represeaited  that  he  had  $1,250,000  in  cash  as  of  Septanber  30,  2017.  But,  from  my  review  of  a 
summary  of  banlc  records  that  were  scheduled  by  an  FBI  forensic  accountant,  I  have  learned  that 
Cohen  had  over  $5,000,000  in  cash  and  cash  equivalents  as  of  September  30, 2017.  Specifically, 
from  my  review  of  the  accoimt  schedule  and  bank  records,  I  have  learned  the  following: 

a.  Cohen  has  three  checking  and/or  savings  accounts  at  Capital  One  Bank,  one  of 
which  is  in  his  wife’s  name.  As  of  September  30, 2017,  Cohen  had  $1,105,680.35  in  his  savings 
account,  and  $1,262,982.29  in  total  in  tlie  three  accounts  at  Capital  One  Bank. 

b.  Cohen  has  three  accoimts  at  Morgan  Stanley  in  liis  name.  As  of  September  30, 
2017,  the  combined  total  in  cash  and  cash  equivalents  in  those  thiee  accoimts  was  $1,270,600.41. 

c.  As  of  September  30, 2017,  Cohen  had  $260,689. 1 8  m  an  account  at  Signature  Bank. 

d.  In  addition  to  the  Essential  Consultants  Account  and  MDC&A  Account  at  Ffrst 
Republic,  Cohen  also  had  two  joint  checking  accounts  with  Laura  Cohen  at  First  Republic.  In  total, 
as  of  September  30,  2017,  Cohen  had  at  least  $1,876,209.27  in  total  in  his  fom-  accounts  at  First 
Republic. 
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e.  Cohen  has  an  account  at  Bethpage  Credit  Union  with  $25,931.39  in  it  as  of 
September  30, 2017. 

f.  As  of  September  30, 2017,  Cohen  had  $17,542.54  in  accounts  at  Sterling. 

g.  Cohen  has  two  accounts  at  TD  Bank — one  in  bis  name  and  one  held  jointly  with  his 
wife — and  the  total  balance  across  the  two  accounts  as  of  September  30, 2017  was  $300,096.72. 

h.  In  total,  as  of  September  30, 2017,  Cohen  had  at  least  $5,014,051.80  in  his  accounts 
— atr  Capital  One  Bankr  Signature  Bank,  TD  Bank,  Bethpage  Credit  Union,-First  Republic,  and 

Morgan  Stanley. 

21 .  Accordingly,  based  on  the  foregoing,  it  appears  that  Cohen’s  representations  to  Sterling 
and  Melrose  that  he  did  not  have  more  than  $1,250,000  were  false,  and  that  Cohen  withheld 
information  regarding  approximately  $5  million  in  funds  ftom  Sterling  and  Melrose,  in  order  to 
secure  favorable  terms  in  his  renegotiation  of  his  medallion  loan.  Based  on  my  participation  in  an 
interview  with  Sterling  Employee-2,  and  my  review  of  reports  of  interviews  with  Sterling 
Employee-1  and  two  Melrose  employees,  it  is  my  understanding  that  that  Sterling  and  Mehose 
would  view  Cohen’s  imderstating  of  his  assets  as  material  to  its  decision  whether  to  renegotiate 
Cohen’s  medallion  loans  and  on  what  terms,  or  approve  of  the  transfer  of  those  loans  to 

Cohen  Had  a  Side  Aa'eement  With^^^^^^j 

22.  As  set  forth  in  detail  below,  it  appears  that  during  the  course  of  Cohen’s  negotiations  to 

sell  his  interest  in  taxi  medallions  and  the  associated  debt  to^^m^mm  Cohen  not  only 
misrepresented  his  financial  positioir  to  Sterling,  but  also  failed  to  disclose  a  side  deal  he  had 
negotiated  with  it  appears  that  agreed  to  pay  an  above-market  price  for 

Cohen’s  taxi  cab  medallions,  and  in  exchange,  Cohen  agreed  to  pay^^^^^^Bpproximately 
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$3.8  million  in  cash.  Specifically,  firom  my  review  of  documents  produced  pursuant  to  a  subpoena 
by  Sterling,  and  reports  prepared  by  law  enforcement  officers  of  interviews  with  Sterling 
Employee-1 ,  as  well  as  my  participation  in  an  interview  with  Sterling  Employee-2, 1  have  learned, 
among  other  things,  the  following: 

a.  On  or  about  September  5, 2017,  an  executed  term  sheet  was  circulated  by  Sterling 

Employee-1  to  Cohen  and  See  supra  ^  14(k).  According  to  the  term  sheei^^^ 

^^^^^^Kvould  boiTow  $20,000,000  from  Sterling  and  Melrose,  to  be  secured  by  the  medallions 
to  acquire  from  Cohen.  At  aprice  of  $20  million  for  thirty-two  taxi  medallions, 
the  proposed  transaction  valued  each  medallion  as  worth  $625,000.  The  term  sheet  also 
contemplated  a  $1,265,913  pay-down  of  the  principal  balance  of  the  loan.  The  term  sheet  made  no 
mention  of  a  $3.8  million  payment  from  Cohen  toH^m||  or  any  other  form  of  payment  or 
financial  transaction  between  the  parties. 

b.  Additionally,  an  internal  Sterling  credit  memorandum,  dated  October  4,  2017, 
describing  the  terms  of  the  Cohen-^^^^^ftransaction  and  the  new  loan 

not  mention  any  payments  firom  Cohen  tojjj^^^H  including  a  $3,8  million  payment.  The 
memorandum  also  noted  that  the  “loan  amount  of  $20MM  indicates  a  $625M  purchase  price  per 
medallion”  but  “it  is  recognized  that  this  is  not  m  line  with  cmrent  market  values.”  Indeed, 
according  to  an  internal  Sterling  memorandum  dated  Febmary  5,  2018,  in  the  month  of  January 
2018,  taxi  medallions  sold  for  amounts  ranging  finm  $120,000  to  $372,000.  According  to  Sterling 
Employee- 1  and  Sterling  Employee-2,  they  were  never  told  tha^m^^  agreed  to  a  pm'chase 
price  of  $625,000  in  exchange  for  a  lump  sum  payment  firom  Cohen,  or  that  Cohen  would  make 
any  payment  to 
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23.  While  Cohen  and 


did  not  disclose  any  payment  j&om  Cohen  to 


communications  with  Sterling,  it  appears  that  such  a  payment  was  contemplated. 
Indeed,  based  on  my  review  of  records  maintained  by  Getzel,  and  a  report  prepared  by  law 


enforcement  agents  of  an  interview  with  Getzel,  I  have  learned  the  following,  in  substance  and  in 


part,  regarding  the  proposed  side-payment  from  Cohen  ti| 


a.  On  or  about  September  19,  2017,  Getzel  prepared  a  memorandum  for  Cohen 


- entitled,  “Sale  of  NYC  MedaUion  Entities  and  Debt  Assumption”  (the  “Getzel  Memorandum”).  - 

The  Getzel  Memorandum  summarized  tire  proposed  transaction  between  Cohen  and  
in  part,  as  follows:  “Michael  and  Laura  Cohen  will  transfer  ownership  of  their  13  NYC  medallion 
entities  to  a  Buyer  who  will  assume  their  bank  indebtedness,  upon  the  [Cohens’]  paying  down  the 
debt  portfolio  of  the  13  entities  by  $500,000  and  a  cash  payment  to  the  Buyer-  of  $3,800,000.”*^ 


It  Getzel  did  not  know  where  Cohen  was  going  to  obtain 


As  noted  above,  Cohen  had  more  than  $5,000,000  in  cash  and 


cash  equivalents  as  of  September  2017,  but  had  only  disclosed  in  his  September  2017  Financial 
Statement  that  he  had  $1 .25  million  in  cash. 

24.  Based  on  my  review  of  records  maintained  by  Sterling  (as  well  as  Melrose,  the  bank 
with  the  participating  mterest  in  the  loans)  and  reports  of  interviews  of  representatives  of  Sterlhig 
(and  Melrose),  I  have  seen  no  evidence  that  Sterling,  Melrose,  or  any  other  fmancial  institution 
involved  in  the  potential  deal  with  Cohen  and^^^^^ivas  aware  of  the  planned  $3.8  million 
side  payment  from  Cohen 


“  The  reference  to  thuteen  medallions  appears  to  be  an  error  by  Getzel.  Cohen  and  his  wife 
together  owned  sixteen  corporations,  which  in  ton  owned  32  taxi  medallions. 
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D.  Probable  Cause  Regarding  the  Subject  Accounts 

25.  As  set  foiih  above,  since  at  least  September  2015,  if  not  earlier,  Cohen  has  told  Sterling 
that  he  has  difficulty  making  payments  on  his  medallion  loans  and,  since  at  least  October  2016, 
Cohen  has  been  actively  engaged  in  an  attempt  to  sell  his  taxi  medallions  and  the  associated  debts 
In  the  course  of  doing  so,  Cohen  has  used  the  Cohen  Account  and/ or  MDCPC 
Account  to  engage  in  email  communications  regarding  the  terms  of  the  transactions  and  the 
undisclosed- side-payment  with  at  the  Account, 

the||^^|^^^Account,  at  the^^^^ccount. 

as  described  above,  there  is  probable  cause  to  believe  that  the  Subject  Accounts  have  been  used 
regarding  the  proposed  Cohen^^^^^Jtransaction  with  Sterling: 

a.  Cohen  has  used  the  Cohen  Account  to,  among  other  things,  negotiate  a  pay-down 
of  the  prmcipal  amount  of  the  loan,  see  supra  ^  14(g),  to  send  term  sheets  to  Sterling,  see  supra  T[ 
14(j),  to  communicate  widi  his  accountant  about  the  contents  of  financial  statements,  see  supra  T| 
16,  to  send  financial  statements  to  Sterling,  see  supra  ^  14(i),  (1),  to  check  on  the  status  of  the 
transaction  as  of  January  24,  2018,  see  supra  14(n),  to  negotiate  a  reduction  of  his  debt  with 
Sterling  on  or  aroimd  January  31, 2018,  see  supra  If  14(o),  to  tell  Sterlhig  on  February  1, 2018,  he 
does  not  have  the  ability  to  pay  more  than  $1,250,000,  see  supra  If  1 4(p),  and  to  communicate  with 
individuals  responsible  for  somces  of  payments  to  the  Essential  Consultants  Account,  see  supra  ^ 
15.  In  otlier  words,  from  the  conununications  described  above,  it  appears  lilcely  that  the  Cohen 
Account  will  contain  recent  evidence  of  the  Subject  Offenses,  including  communications  and 
potential  misrepresentations  to  Sterling,  and  evidence  indioatmg  that  statements  made  to  Sterling 
are  false  or  misleading, 

b.  used  the^^^^^^^^^^Accountto  commimicate 

the  proposed  taxi  medallion  transaction  with  Cohen,  which  appears  to  have  been  discussed  as  early 
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as  October  2016.  See  supra  1 14(g).^^  Specifically,  as  described  above,  as  early  as  May  2, 2017, 
||||||||||[|||||||[|||use^  to  inquiio  about  the  status  transaction, 

see  supra  H  14(h).  He  used  ih^^^^^^|4ccount  to  exchange  drafts  of  the  proposed  term 
sheet  with  Cohen^^^,  and  Sterling,  see  supra  H  14(j).  The^^^^^^^^f  ccount  was  also 
used  send  a  personal  financial  statement  Sterling, 

see  supra  ^  14(1).  Account  was  copied  on  emails  fi'om  thelBliHI 

"Account  about  the  tf^action,  see  supra^^  f4(i),  and  was  listed  financial 

statement  as  the  contact  email  see  supra  Tf  1 4(m).  Additionally,  based  on  my 

review  of  MDCPC  Header  Information,  I  know  that  on  or  about  September  1, 2017— at  or  around 
the  tune  th(^^^^^^|and  Cohen  were  negotiating  a  term  sheet— the 
Accoimt  to  send  and  receive  eiglit  emails  firom  Cohen  at  the  MDCPC  Account, 
c.  *^sed  thi^^l^ccount  to  communicate  with  Sterling  employees,  Cohen, 

the  proposed  taxi  medallion  transaction  since  at  least  December  2016. 
See  supra  14(g),  24(c).  Specifically,  on  or  about  August  29,  2017,  told  Sterling  that  he 
should  be  included  on  “all  future  e-mails”  involving  the  proposed  transaction,  see  supra  K  140). 
Additionally, ^^|was  involved  in  maldng  revisions  to  the  parties’  term  sheets,  and  he  told 
Sterling  on  Januai-y  29, 2018  that^^^^^|  would  not  go  foiward  witli  the  plamied  transaction, 
see  supra  ^  140),  (^t)-  Accordingly,  there  is  probable  cause  to  believe  tliat  the^^J^ccount  will 
contain  evidence  of  the  negotiations  between  Sterling  and  the  paities,  evidence  of  a  payment  from 
Cohen  to^^^^^l  and  the  reasons  for  the  collapse  of  the  Coher^^^^^^Btransaction. 


For  instance,  fi'om  records  provided  by  Sterling,  I  know  that  op 
2016^^^^^^^^|ent  an  email  to  a  Sterling  emplove^sing  the 
Account.  The  email  forwarded  correspondence  betweer^^^Bv^^^yr^^^^ 

Account,  and  an  employee  of  Capital  One  regarding  extending^^^^^^^ioan  with 
Capital  One. 
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26.  Additionally,  it  appears  that  Cohen  set  up  the  MDCPC  Account  to  receive  emails  he 
was  previously  receiving  at  the  Cohen  Account.  Specifically,  based  on  my  review  of  records 
maintained  by  AT&T,  I  have  learned  that  on  or  about  May  5, 2017,  Cohen  sent  an  email  &om  the 
MDCPC  Account  to  a  blind  copy  list  of  recipient  stating  that  “[d]ue  to  the  overwhelming  volume 
of  phone  calls  and  emails  coming  into  my  previous  cellular  number  and  e-mail  address,  I  have 
elected  to  create  for  Clients  Only  the  following.  Kindly  use  this  new  information  for  all  future 
coh^ct  and  communicatibns.”  'The  signature  line  on  the  email  listed  “Essential  Consult^ts  LLC 
and  “Michael  D.  Cohen  &  Associates,  PC,”  as  well  as  the  MDCPC  Account  as  the  email  address.  ^ 

27.  In  addition,  based  on  my  review  of  emails  from  the  MDCPC  Account  produced 
pursuant  to  the  Prior  Cohen  Account  Warrants  and  the  MDCPC  Header  Mormation,  I  have  learned 
that  Cohen  has  used  the  MDCPC  Account  to  send"  and  receive  emails  from  the  Cohen  Account,  to 
communicate  with  th«^^|\ccount,  and  to  send  and  receive  emails  from  other  email  accounts 
about  his  political  consulting  business.  Additionally,  from  my  review  of  the  MDCPC  Header 
Information,  it  appears  tliat  since  the  November  13,2017  search  warrant  on  the  MDCPC  Account, 
Cohen  has  continued  to  send  and  receive  emails  at  the  MDCPC  Account  that  appear  likely  to  be 
relevant  to  the  commission  of  the  Subject  Offenses.  For  example,  emails  obtained  pursuant  to  the 
Prior  Cohen  Account  Warrants,  as  well  as  the  MCDCPC  Header  Infoimation  have  revealed  the 
following: 

a.  On  approximately  eight  occasions  in  August  and  September  2017,  while  Cohen, 
communicating  about  term  sheet  for  the  Cohe:^^^^^^^Htaxi 


Based  on  my  review  of  emails  fr  om  the  MDCPC  Account  obtained  pursuant  to  subpoena,  I 
have  learned  that  Cohen  has  used  die  account  to  communicate  with  numerous  individuals  with 
whom  he  does  not  enjoy  an  attorney-client  privilege,  including  some  of  the  individuals  described 
below.  See  infra  T[  27. 
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medallion  transaction,  see  supra  T[  14(lc),  Cohen  used  the  MDCPC  Account  to  send  oi  receive 
emails  froi^^Hat  the^^HAccount.  For  instance,  on  or  about  August  22,  2017;^^Jased 


tt;^^^^|VccourLt  to  send  an  email  to  Sterling  Employee-1  and  copied  Cohen  on  the  email  at  the 
MDCPC  Account.  On  the  same  day.  Sterling  Employee-1  responded  to^^^at  the^^jAccount 
and  Cohen  at  the  MDCPC  Account.  On  or  about  August  22, 2017,  Cohen  also  used  the  MDCPC 


Account  to  send  an  email  to  Sterling  Employee-1. 

b.  As  noted  above,  on  or  about  September  1, 2017,  Cohen  used  the  MDCPC  Account 


to  send  or  receive  eight  emails  with  the 


Account. 


’  c.  Cohen  used  the  MDCPC  Account  to  send  and  receive  emails  from  individuals  who 
work  at  companies  with  whom  it  appears  Cohen  has  a  poUtical  consulting  agi-eement.  For 
example,  beginning  in  April  2017— the  same  month  when  Cohen  began  receiving  payments  from 


AT&T,  see  supra  Hlj  16(d),  17(c)— Cohen  used  the  MDCPC  Accouirt  to  send  and  receive  emails 
from  AT&T  employees.  These  emails  contain,  among  other  things,  invoices  fi-om  Cohen  to  AT&T 
for  consulting  work  by  Cohen.  Similarly,  beginning  in  April  2017— which  is  also  the  mon± 
Cohen  began  receiving  payments  from  Novartis  for  consulting  work,  see  supra  16(d),  17(d) 
Cohen  used  the  MDCPC  Account  to  send  and  receive  emails  from  employees  of  Novartis.  These 
emails  concern,  among  other  things,  invoices  from  Cohen  and  requests  for  Novartis  for  Cohen’s 


assistance  on  an  initiative  relating  to  drag  pricing. 

d.  From  my  review  of  the  MDCPC  Header  Information,  I  have  learned  that  Cohen  has 
continued  to  use  the  MDCPC  Account  to  send  and  receive  emails  from  individuals  who  work  at 
companies  with  whom  it  appeal's  Cohen  had  a  political  consulting  agreement,  such  as  Novartis  and 
AT&T.  For  instance,  on  approximately  six  occasions  between  November  28, 2017  and  January 
30, 2018,  die  MDCPC  Account  was  used  to  send  and  receive  emails  from  accounts  belonging  to 
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individuals  using  @att.com  email  addresses.  Similarly,  on  approximately  seventeen  occasions 
between  December  1,  2017  and  February  20,  2018,  the  MDCPC  Account  was  used  to  send  and 
receive  emails  j&om  accounts  belonging  to  individuals  using  @novartis.com  email  addi'esses. 
Since  November  IS,  2017,  the  MDCPC  Account  has  also  sent  and  received  emails  with  individuals 
using  the  email  domains  @bta.lcz,  which  I  believe  is  the  email  domain  used  by  employees  of  BTA 
Bank,  see  supra  ^  16(d),  17(b),  and  @scjuu'epb.com,  which  I  believe  is  the  email  domain  used  by 
employees  of  the  law  finn  Squire  Patton  Boggs-^both  of  which  Cohen  appears  to  have  a 
consulting  relationsliip  with,  see  supra  16(e),  17(e).  Accordingly,  it  appears  that  Cohen 
continues  to  use  the  MDCPC  Account  to  send  and  receive  emails  that  will  be  relevant  to  whether 
he  is  maintaining  a  consulting  business,  what  type  of  consulting  work  he  is  doing,  and  whether  he 


is  receiving  money  for  that  consulting  work. 

28.  In  addition  to  the  foregoing,  based  on  my  review  of  the  Pen  Register  Data,  see  supra  | 
9,  it  appeai-s  that  since  the  date  of  the  last  search  warrant  on  the  Cohen  Account  (i.e.,  November 
13,  2017),  Cohen  has  continued  to  use  the  Cohen  Account  to  conomunicate  with  the 
^^^^^^Kcount,  the  ^^^Vccount,  and  other  email  accounts  that  appear  likely  to  be  relevant 
to  the  commission  of  the  Subject  Offenses  described  above.  For  example,  the  Pen  Register  Data 


Lccount  on  or  about  December  18, 


has  revealed  the  following: 

a.  Emails  sent  by  the  Cohen  Account  to  the^ 

2017  at  8:26  p.m.,  December  21,  2017  at  9:35  p.m.,  December  22, 2017  at  4:32  p.m.,  January  3, 

2018  at  8:01  a.m.,  January  3, 2018  at  2:56  p.m.,  and  January  4, 2018  at  3:31  p.m. 


b.  An  email  sent  by  the  Cohen  Account  to  the  | 
January  25, 2018  at  8:55  p.m. 


Account  on  or  about 
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Ion  or 


c.  Emails  fi-om  the  Cohen  Account  to  the  email  accoun^^^^^^^^^^_ 
about  Decembei- 1, 2017  at 2:14  p.m..  December  29, 2017  at  10:20  p.m.,  January  2, 2018  at  3:52 
p.m.,  January  2,  2018  at  5:44  p.m.,  and  January  8,  2018  at  6:38  p.m.  Based  upon  my  review  of 
emails  contained  in  the  Cohen  Account,  I  have  learned  that  email  account 

belongs  to  Jeffrey  Getzel,  Cohen’s  accountant,  through  whom  Cohen  made  misrepresentations  to 
financial  institutions,  as  discussed  above. 


“  dr  Titnails  firom  the  Cohen  Account  to  email  accounts  belonging  to  Sterling  employees, 
including  Sterling  Employee-1,  on  or  about  January  25,  2018  at  10:23  p.m.,  January  26,  2018  at 
12:55  a.m.,  January  29, 2018  at 5:30  p.m.,  January  29, 2018  at  8:29  p.m.,  January  30, 2018  at  6:44 


p.m. 

e.  An  email  sent  from  the  Cohen  Account  to  the  email  account 
clientsei'viceny@firstrepublic.com  on  or  about  January  25,  2018  at  5:29  p.m.  As  stated  above. 
First  Republic  is  the  bank  at  which  the  Essential  Consultants  Account  is  held. 

f.  Numerous  emails  sent  fi:om  the  Cohen  Account  to  the  email  account 

including  emails  on  or  about  December  4, 2017.  at  2:17  pun.  and  January  29, 
201 8  at  5 :43  p.m.  Based  upon  the  email  address  and  domain  name,  as  well  as  my  review  of  reports 
of  interviews  and  documents  reflecting  that  Cohen’s  taxi  medallions  were  leased  and  operated  by 


email  address  belongs  to 


29.  Based  on  my  review  of  records  mamtained  by  Sterling,  I  know  that  Cohen  used  the 
Cohen  Account  to  send  and  receive  documents  related  to  the  Cohen-^^^^^|transaction. 
Based  on  my  toahiing  and  experience,  I  loiow  that  Google  allows  users  of  e-mail  accounts  to  easily 
save  documents  to  file  sharing  and  retention  platforms  such  as  Google  Docs  and  Google  Drive.  I 
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also  know,  fiom  my  training  and  experience,  that  users  of  e-mail  accounts  often  use  instant 
messaging  interfaces  linked  to  their  email  accounts.  Further,  I  have  learned  that  the  Providers 
mauitain  records  of  search  and  web  histories  associated  with  email  accounts  and,  based  on  my 
training  and  experience,  users  of  e-mail  accounts  use  associated  web  search  browsers  associated 
with  a  subscriber’s  account  to  research  topics  they  are  e-mailing  about.  Accordingly,  there  is 
probable  cause  to  believe  that  content  information  associated  with  the  Subject  Accounts  will  also 
contain  evidence  related  to  the  Subject  Offenses. 

30.  Thus,  I  respectfully  submit  thattlrere  is  probable  cause  to  believe  that  emails  and  other 
content  information  from  the  Subject  Accounts  will  contain  evidence  of  Cohen’s  efforts  to  sell  his 
taxi  medallions  and  the  associated  debt,  and  his  misrepresentations  and  omissions  to  Sterling  and 
Mekose  in  connection  with  these  negotiations.  Although  Cohen  appears  to  have  communicated 

through  the 

MDCPC  Account,  I  know,  based  on  my  mvolvement  in  the  investigation,  that  Cohen  also  used  at 
least  one  other  email  account  associated  with  his  position  at  the  Trump  Organization.  Thus,  I 
respectfully  submit  that  there  is  probable  cause  to  believe  that  emails  and  other  content  information 
from  the  ^^^^^^^^^^.ccount,  ,^^^^^^^^|4.ccount  and  ^^|\ccoimt 
about  October  1,  2016— the  approximate  date  of  when  Cohen’s  efforts  to  sell  his  taxi  medallions 
and  the  associated  debt  began — ^will  reflect  communications  with  the  Cohen  Account,  MDCPC 
Account,  and  possibly  one  or  more  additional  accounts  used  by  Cohen,  and  probable  cause  to 
believe  that  such  emails  will  constitute  evidence  of  Cohen’s  commission  of  the  Subject  Ofienses, 
includiug  the  extent  to  which  Cohen  did  or  did  not  inform  other  individuals  involved  in  the  conduct 
above— such  of 

omissions  to  financial  institutions. 
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31.  Temporal  Liniitation.  This  application  seeks  all  emails  and  other  requested  content 
information  specified  in  Attacfaments  A,  B,  C,  and  D  for  the  following  periods: 

a.  For  the  Cohen  Account,  this  application  seeks  all  emails  sent,  created,  or  received 
between  November  14, 2017,  and  the  date  of  the  proposed  warrant,  inclusive.  As  described  above, 
pursuant  to  the  Prior  Cohen  Account  Warrants,  the  SCO  obtained  and  provided  to  the  USAO 
emails  firom  the  Cohen  Account  that  were  sent,  created,  or  received  before  November  14,  2017. 
This  application  also  seeks  other  infdimation  specified  above  associated  with  the  Cohen  Account 
that  was  created  between  December  1,  2014  (the  month  when  Cohen  entered  into  the  medallion 
loans  with  Sterling),  and  the  date  of  the  proposed  warrant,  inclusive. 

b.  For  the  MDCPC  Account,  this  application  seeks  all  emails  sent,  created,  or  received 
between  November  14, 2017,  and  the  date  of  the  proposed  warrant,  inclusive.  As  described  above, 
pursuant  to  a  prior  warrant,  the  SCO  obtained  and  provided  to  the  USAO  emails  firom  the  MDCPC 
Account  that  were  sent,  created,  or  received  before  November  14, 2017. 

For  the^^^^^^^^Vccount  and  .^^m||U||||P^ccount,  this 
seeks  emails  and  aU  other  content  information  specified  above  sent,  created,  or  received  between 
October  1,  2016,  and  the  date  of  the  proposed  warrant,  inclusive.  As  described  above,  October 
2016  is  the  month  in  which  Cohen  began  negotiating  the  taxi  medallion  sale  withlf^^^^^^l 
d.  For  the  ^^^Vccount,  this  application  seeks  emails  and  all  other  content 
information  specified  above  sent,  created,  or  received  between  December  1, 2016,  and  the  date  of 
the  proposed  wan'ant,  inclusive.  As  described  above,  December  2016  is  the  month  in  which^^^| 
began  representing  relation  to  the  taxi  medallion  transaction. 

E.  Evidence,  Fruits  and  Instrumentalities 

32.  Based  upon  the  foregoing,  I  respectfully  submit  there  is  probable  cause  to  believe  that 
information  stored  on  Google’s  servers  associated  with  the  Cohen  Account  will  contain  evidence, 
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fruits,  and  instrumentalities  of  violations  of  the  Subject  Offenses,  as  more  fully  described  in 
Section  II  of  Attachment  A  to  the  proposed  wanant  for  the  Cohen  Account  and  MDCPC  Account, 
including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  the  person(s)  who  created  or  used  the  Cohen  Account  or  MDCPC  Account. 

b.  Communications,  records,  documents,  and  other  files  involving  Sterling,  Melrose, 
and/or  taxi  medallions; 

0,  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or 
agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions, 
and  any  associated  debts  ot  liabilities,  to  other’s,  including  tc^^^^^^^^^^^|ind/or  entities 

associated  with  him; 

. . 

.  ' d,  •  Communications,  records,  documents,  and  other  files  involving  Essential 
Consultants,  or  Michael  D.  Cohen  &  Associates,  including  those  which  indicate  the  nature 
and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  Michael  D.  Cohen  & 
Associates; 

e.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  any  person(s)  —  including  records  that  reveal  the  whereabouts  of  the  person(s) — who 
communicated  with  the  Cohen  Account  and/or  MDCPC  Account  about  any  matters  relating  to 
Essential  Consultants,  LLC,  or  about  any  plan  or  proposal  or  agreement  for  Cohen  and/or  entities 
associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  m|H|m|ind/or  entities  associated  vdtli  him; 

f.  Communications  between  the  Cohen  Account  and/or  MDCPC  Account  and  Jeffrey 
Getzel  relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 
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g.  Conununications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan 
at  that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  mstitution, 

h.  Evidence  indicating  how  and  when  the  Cohen  Account  and  MDCPC  Account  was 
accessed  oFused,  to  determine  the  geo^hphic  and  chronological  context  of  account  access,  use,- 
and  events  relating  to  the  crimes  under  investigation  and  to  the  account  owner;  and 

i.  Evidence  indicating  the  Cohen  Account  and  MDCPC  Account  owner’s  intent  as  it 

relates  to  the  Subject  Offenses  under  investigation. 

33.  Based  upon  the  foregoing,  I  further  submit  there  is  probable  cause  to  believe  that 

information  stored  on  Google’s  servers  associated  with  the 

.ccount  will  contain  evidence,  fi.Tiits,  and  mstrumentalities  of  violations  of  the  Subject 

Offenses,  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  the  person(s)  who  created  used  ti^^^^^^^^^Account  and^^^^^^^^| 
Account; 

b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal 
or  agreement  for  Cohen  and/or  entities  associated  with  lum  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  h^^^^^^^^^^and/or  entities  associated 
with  Mm; 

c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  any  person(s)  —  including  records  that  reveal  the  whereabouts  of  tire  person(s)  —  who 


Account  and  I 
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cornmunicated  with  and  Account  about  any 

matters  relating  to  any  plan  or  proposal  or  agi*eement  for  Cohen  and/or  entities  associated  with  him 
to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or  liabilities,  to 
^Umillll^d/or  entities  associated  with  him; 

d.  Communications  between  Account  and 

Account  and  others,  including  employees  or  representatives  of  Sterling,  Mehose,  or  other  financial 
mstitution(s),  f^ardin^CoEen's  finances; 

e.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan 
at  that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  somxe  of  ftmds  flowing  into  an  account;  or  the  purpose  or  natoe  of  any 
financial  transactions  involving  that  financial  institution; 

f.  Evidence  indicating  how  and  when  the  Accoimt  and 

^^^^^^^|4ccount  were  accessed  or  used,  to  determine  the  geographic  and  chronological  context 

of  account  access,  use,  and  events  relating  to  the  crimes  under  investigation  and  to  the  account 
owner; 

g.  Evidence  indicating  Account  and  Accoimt 

owners’  intent  as  it  relates  to  the  Subject  Offenses  under  investigation, 

34.  Based  upon  the  foregoing,  I  further  submit  there  is  probable  cause  to  believe  that 
infomiation  stored  on  Oath’s  servers  associated  with  thc^^^^^|tccount  will  contain  evidence, 
fi-uits,  and  inshumentalities  of  violations  of  the  Subject  Offenses,  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  the  person(s)  who  created  or  used  the^^^Jccount; 
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b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal 
or  agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  ti^|^|m^|and/or  entities  associated 
with  him; 

c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  —  who 
communicated  with  the  ^^HA.ccoimfabout  any  matters  relating  to  any  plan  or  proposal  of 
agreement  for  Cohen  and/or  entities  associated  with  him  to  hansfer  any  interest  in  taxi  medallions, 
and  any  associated  debts  or  liabilities,  t^^^^^^^^^^nd/or  entities  associated  with  him; 

d.  Communications  between  l^^^^\.ccount  and  others,  including  employees  or 
representatives  of  Sterling,  Mebose,  or  other  financial  institution(s),  regarding  Cohen’s  finances; 
and 

e.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution. 

m.  Review  of  the  Information  Obtained  Pursuant  to  the  Warrant 

35.  Pursuant  to  18  U.S.C.  §  2703(g),  the  presence  of  a  law  enforcement  officer  is  not 
requbed  for  service  of  a  search  warrant  issued  rmder  §  2703,  or  for  the  collection  or  production  of 
responsive  records.  Accordingly,  the  warr  ant  requested  herein  will  be  transmitted  to  the  Providers, 
which  shall  be  dbected  to  produce  a  digital  copy  of  any  responsive  records  to  law  enforcement 
personnel  within  30  days  from  the  date  of  service.  Law  enforcement  personnel  (including,  in 
addition  to  law  enforcement  officers  and  agents,  and  depending  on  the  nature  of  the  ESI  and  tire 
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status  of  the  investigation  and  related  proceedings,  attorneys  for  tlie  government,  attorney  support 
staff,  agency  personnel  assisting  the  goveriunent  in  this  investigation,  and  outside  technical  experts 
under  government  control)  will  retain  the  records  and  review  them  fof  evidence,  ftmts,  and 
instrumentalities  of  the  Subject  Offenses  as  specified  in  Section  HI  of  Attachments  A,  B  and  C  to 
the  proposed  warrant. 

36.  In  conducting  this  review,  law  enforcement  personnel  may  use  various  methods  to 
locate  evidence,  fruits, ^d  instrumentalities  of  the'  Subject  Offenses,  including  but  not  limited  to 
undertaking  a  cursory  inspection  of  all  emails  within  the  Subject  Account.  This  method  is 
analogous  to  cursorily  inspecting  all  the  files  in  a  file  cabinet  in  an  office  to  determine  which  paper 
evidence  is  subject  to  seizure.  Although  law  enforcement  personnel  may  use  other  methods  as 
well,  particularly  including  keyword  searches,  I  know  that  keyword  searches  and  similar  methods 
are  ^ically  inadequate  to  detect  all  information  subject  to  seizure.  As  an  initial  matter,  keyword 
searches  work  only  for  text  data,  yet  many  types  of  files  commonly  associated  with  emails, 
including  attachments  such  as  scanned  documents,  pictures,  and  videos,  do  not  store  data  as 
searcliable  text.  Moreover,  even  as  to  text  data,  keyword  searches  cannot  be  relied  upon  to  capture 
all  relevant  communications  in  an  accoimt,  as  it  is  impossible  to  know  in  advance  all  of  the  rrmque 
words  or  phrases  that  investigative  subjects  will  use  hr  their  communications,  and  consequently 
there  arc  often  many  commurrications  in  an  accoimt  that  are  relevant  to  an  investigation  but  that 
do  not  contain  any  keywords  that  an  agent  is  lilcely  to  search  for. 

37.  Because  Cohen  anc^^^|ire  attorneys,  the  review  of  the  content  within  the  Subject 
Accounts  will  be  conducted  pursuant  to  estabhshed  screening  procedures  to  ensure  that  the  law 
enforcement  personnel  involved  in  the  investigation,  including  attorneys  for  the  Government, 
collect  evidence  in  a  marmer  reasonably  designed  to  protect  any  attorney-client  or  other  applicable 
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privilege.  When  appropriate,  the  procedures  will  include  use  of  a  designated  “filter  team,”  separate 
and  apart  from  the  investigative  team,  in  order  to  review  potentially  privileged  communications 
and  determine  which  communications  to  release  to  the  investigation  and  prosecution  team. 

rV.  Request  for  Non-Disclosure  and  Sealing  Order 

38.  The  existence  and  scope  of  this  ongoing  criminal  investigation  are  not  publicly  known. 

As  a  result,  premature  public  disclosure  of  this  affidavit  or  the  requested  warrants  could  alert 
Cohen  that  he  is  under  hwestigation,  causing  him  to  destroy  evidence,  flee  from  prosecution,'-  or 
otherwise  seriously  jeopardize  the  investigation.  In  particular,  based  on  my  experience 
invcstigatmg  white  collar  cases,  including  cases  featuring  documents  such  as  agreements,  di'afts 
of  agreements,  notes  of  conversations,  and  other  documentary  evidence,  premature  disclosure  of 
an  investigation  may  cause  the  target  of  the  investigation  to  attempt  to  destroy  or  conceal  such 
evidence.  In  addition,  as  also  set  forth  above,  Cohen  uses  computers  and  electronic 
communications  in  furtherance  of  his  activity  and  thus  could  easily  delete,  encrypt,  or  otherwise 
conceal  such  digital  evidence  from  law  enforcement  were  he  to  leam  of  the  Government’s 
investigation.  See  18  U.S.C.  §  2705(b)(3).  Cohen  also  appears  to  have  the  financial  means  that 
would  facilitate  his  flight  from  prosecution.  See  18  U.S.C.  §  2705(b)(2),  (5). 

39.  Accordmgly,  there  is  reason  to  believe  that,  were  the  Providers  to  notify  the  subscriber 
or  others  of  the  existence  of  the  warrant,  the  investigation  would  be  seriously  jeopardized. 
Pursuant  to  1 8  U.S.C.  §  2705(b),  I  therefore  i-espectfully  request  that  the  Court  dfrect  the  Providers 
not  to  notify  any  person  of  the  existence  of  the  warrant  for  a  period  of  180  days  fi'ora  issuance, 
subject  to  extension  upon  application  to  the  Court,  if  necessary. 

40.  For  similai-  reasons,  I  respectfully  request  that  this  affidavit  and  all  papers  submitted 
herewith  be  maintained  under  seal  until  the  Court  orders  otherwise,  except  that  the  Government 
be  peimitted  without  further  order  of  this  Court  to  provide  cojries  of  the  wanant  and  affidavit  as 
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need  be  to  personnel  assisting  it  in  the  investigation  and  prosecution  of  this  matter,  and  to  disclose 
those  materials  as  necessary  to  comply  with  discovery  and  disclosure  obligations  in  any 
prosecutions  related  to  this  matter. 

V.  Conclusion 

41.  Based  on  the  foregoing,  I  respectfully  request  that  the  Court  issue  the  warrants  sought 
herein  pursuant  to  the  applicable  provisions  of  the  Stored  Communications  Act,  18  U.S.C. 

- §  2703(b)(1)(A)  (for  contents)  and  §  2703(c)(1)(A)  (for  records  and  other  information),  and  the 

relevant  provisions  of  Federal  Rule  of  Criminal  Procedme  41. 


United  States  Attorney’s  Office 
Southern  District  of  New  York 


Sworn  to  before  me  this 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 
Associated  with  the  Email  Accounts 
l^graail.com, 


Maintained  at 
Premises  Controlled  by  Google,  Inc., 
USAO  Reference  No.  2018R00127 


Search  Warrant  and  Non-Disclosure  Order 

TO:  Google,  Inc.  (“Provider”) 

United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  the  Federal 

Bureau  of  Inve-stigation  (collectively,  the  “Investigative  Agencies”) 

1.  Warrant.  Upon  an  affidavit  of  Special  Agent  the  United  States 

Attorney’s  Office  for  the  Southern  District  of  New  York,  and  pursuant  to  the  provisions  of  the 
Stored  Communications  Act,  18  U.S.C.  §  2703(b)(1)(A)  and  §  2703(c)(1)(A),  and  the  relevant 
provisions  of  Federal  Rule  of  Criminal  Procedure  41,  the  Court  hereby  finds  there  is  probable 
cause  to  believe  the  email  account^^^^^^^^@gmail.com;^^^^^^gmail.com,  and 

maintained  at  premises  controlled  by  Google,  hic.,  contain  evidence, 
fimits,  and  instrumentalities  of  crime,  all  as  specified  in  Attaclnnents  A  and  B  hereto.  Accordingly, 
the  Provider  is  hereby  du'ected  to  provide  to  the  hivestigative  Agencies,  within  7  days  of  the  date 
of  service  of  this  Warrant  and  Order,  the  records  specified  in  Section  II  of  Attachments  A  and  B 
hereto,  for  subsequent  review  by  law  enforcement  personnel  as  authorized  in  Sections  III  and  IV 
of  Attachments  A  and  B.  The  Government  is  required  to  serve  a  copy  of  this  Warrant  and  Order 
on  the  Provider  witliin  7  days  of  the  date  of  issuance.  The  Warrant  and  Order  may  be  served  via 
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electronic  transmission  or  any  other  means  through  which  the  Provider  is  capable  of  accepting 


service. 


2.  Non-Disclosure  Order.  Pursuant  to  18  U.S.C.  §  27050),  the  Couit  finds  that  there  is 
reason  to  believe  that  notification  of  the  existence  of  this  waiTant  will  result  in  destruction  of  or 
tampering  with  evidence  or  flight  fi'om  prosecution,  or  otherwise  will  seriously  jeopardize  an 
ongoing  investigation.  Accordingly,  it  is  hereby  ordered  that  the  Provider  shall  not  disclose  the 
existeace  of  this  Warrant  and  Order  to  the  listed  subscriber  or  to  any  other  person  for  a  period  of 
180  days  fi-om  the  date  of  this  Order,  subject  to  extension  upon  application  to  the  Court  if 
necessaiy,  except  that  Provider  may  disclose  this  Warrant  and  Order  to  an  attorney  for  Provider 
for  the  purpose  of  receiving  legal  advice. 

3.  Sealing.  It  is  finlher  ordered  that  this  Warrant  and  Order,  and  the  Affidavit  upon  wliich 
it  was  issued,  be  filed  under  seal,  except  that  the  Government  may  without  further  order  of  this 
Comt  sei-ve  the  Warrant  and  Order  on  the  Provider;  provide  copies  of  the  Affidavit  or  Warrant  and 
Order  as  need  be  to  persoimel  assisting  the  Government  in  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure 
obligations  in  any  prosecutions  related  to  this  matter. 

Dated :  New  Y ork.  New  Y ork 


Time  Issued 


^ChiefUnit^Stat^'S'MamstoteJudge 
Southern  Districi'qlf  N^,j^qrk' 
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Email  Search  Attachment  A 
I.  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  Google,  Inc.  (the  "Provider”),  headquartered  at  1600 
Amphitheatre  Parkway,  Mountain  View,  California  94043,  and  applies  to  all  content  and  other 
information  within  die  Provider’s  possession,  custody,  or  control  associated  with  the  email  account 
il.comi  (the  “Subject  Account”)  for  the  time  period  referenced  below. 

A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another 
appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  tlie  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  11  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  III  below, 
n.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 

to  produce  the  following  infonnation  associated  with  the  Subject  Account: 

a.  Email  content.  All  emails  sent  to  or  firora,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Account,  including  all  message  content,  attachments,  and  header  , 
infonnation  (specifically  including  the  somce  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email) 
limited  to  items  sent,  received,  or  created  between  November  14, 2017  and  the  date  of  this  warrant, 
inclusive. 

b.  Address  book  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Account. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Account,  including  but  not  limited  to  name,  username,  address,  telephone 
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number,  alternate  email  addresses,  registration  IP  addi'ess,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 

d.  Transactional  records.  All  transactional  records  associated  witli  the  Subject  Account, 
including  any  IP  logs  or  other  i-ecords  of  session  times  and  durations,  limited  to  items  sent, 
received,  or  created  between  December  1, 2014  and  the  date  of  this  warrant,  inclusive. 

e.  Customer  correspondence.  AH  coiTespondence  with  the  subscriber  or  others  associated 
with  the  Subject  Account,  including  complaints,  inquiries,-  or  other  contacts  with  support  services 
and  records  of  actions  taken,  limited  to  items  sent,  received,  or  created  between  December  1, 2014 
and  the  date  of  this  warrant,  inclusive. 

f.  Sedrch  History.  All  search  history  and/or  web  history  associated  with  the  Subject 
Accormt,  limited  to  items  sent,  received,  or  created  between  December  1, 2014  and  the  date  of  this 

'  warrant,  inclusive. 

g.  Associated  content.  All  Google  Docs,  files  maintained  on  Google  Drive,  and  mstant 
messages  or  Gchats  associated  with  the  Subject  Account,  limited  to  items  sent,  received,  or  created 
between  December  1, 2014  and  tire  date  of  this  warrant,  inclusive. 

h.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  18 
U.S.C.  §  2703(f)  or  otherwise. 

ni.  Review  of  Information  by  the  Government 

Law  enforcement  personrrel  (who  may  include,  iir  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
govemmerrt  in  tiris  investigation,  and  outside  teclmical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
and  instrumentalities  of  violations  of  18  U.S.C.  §§  371  (conspiracy  to  commit  offense  or  to  defi-aud 
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the  United  States),  1005  (false  bank  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (bank  fraud),  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Account; 

b.  Communications,  records,  documents,  and  other  files  involving  Sterling  National 
Bank,  Melrose  Credit  Union,  and/or  taxi  medallions; 

c.  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  hhn  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  others,  including 
entities  associated  with  him; 

d.  Communications,  records,  documents,  and  other  files  involving  Essential  Consultants, 
LLC  or  Michael  D.  Cohen  &  Associates,  including  those  which  indicate  the  nature  and  purpose  of 
payments  made  to  or  from  Essential  Consultants  or  Michael  D.  Cohen  &  Associates; 

e.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  any  person(s)  —  including  records  that  reveal  the  whereabouts  of  the  person(s)  —  who 
communicated  with  the  Subject  Account  about  any  matters  relating  to  Essential  Consultants,  LLC, 
or  about  any  plan  or  proposal  or, agreement  for  Michael  D.  Cohen  and/or  entities  associated  with 
him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or  liabilities,  to  others, 
including  l|||||m|m||||||  and/or  entities  associated  with  him; 

f.  Communications  between  the  Subject  Account  and  Jeffrey  Getzel  relating  to  Michael 
D.  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 

g.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  pmpose  of  an  account  or  loan  at  that  financial 
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institution]  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
tlie  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
uivolving  that  financial  institution; 

h.  Evidence  indicating  how  and  when  the  Subject  Account  was 'accessed  or  used,  to 
determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner';  and  ' 

- ir  Evidence  indicating  the  Subject  Account  owner’s  intent  as  it  relates  to  the  Subject 

Offenses  under  investigation. 

IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procediu'es  designed  to  collect  evidence  in  a  maimer  reasonably  designed  to  protect 
any  attoniey-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  fi'om  the  investigative  team,  in  order  to  address 
potential  privileges. 
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Email  Search  Attachment  B 
I.  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  Google,  Inc.  (the  “Provider”),  headquartered  at  1600 
Amphitheatre  Parkway,  Mountain  View,  California  94043,  and  applies  to  all  content  and  other 
information  within  the  Provider’s  possession,  custody,  or  conttol  associated  with  the  email 

(the  “Subject  Accounts”)  for  the  time 

period  between  October  1, 2016  and  the  date  of  this  warrant,  inclusive,  - - 

A  law  enforcement  officer  will  serve  this  wan-ant  by  transmitting  it  via  email  or  another 
appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  11  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  III  below, 
n.  Information  to  be  Produced  by  the  Provider 

To  tire  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 

to  produce  the  following  information  associated  with  the  Subject  Accounts; 

a.  Email  content.  All  emails  sent  to  or  from,  stored  in  di'aft  form  in,  or  otherwise 
associated  with  tlic  Subject  Accounts,  'including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  die  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email). 

b.  Address  hook  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Accounts. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Accounts,  including  but  not  limited  to  name,  username,  address,  telephone 


accounts 
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number,  alternate  email  addresses,  registration  IP  address,  account  creation  date,  accoxmt  status, 
length  of  service,  types  of  services  utilized,  means  and  soxu'ce  of  payment,  and  payment  history, 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Accounts, 
including  any  IP  logs  or  other  records  of  session  times  and  durations. 

e.  Customer  correspondence.  All  con-espondence  with  the  subscriber  or  others  associated 
with  the  Subject  Accounts,  including  complaints,  inquiries,  or  other  contacts  with  support  services 
and  records  of  actions  taken. 

£  Search  History.  All  search  history  and/or  web  history  associated  with  the  Subject 
Accounts. 

g.  Associated  content.  All  Google  Docs,  files  maintained  on  Google  Drive,  'and  mstant 
messages  or  Gchats  associated  with  the  Subject  Accounts. 

h.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  apresei-vation  request  issued  pursuant  to  18 
U.S.C.  §  2703(f)  or  otherwise. 

in.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  ofBcers  and 

agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
goveiTunent  in  this  investigation,  and  outside  technical,  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
and  inshTjmentalities  of  violations  of  18  U.S.C.  §§  371  (conspiracy  to  commit  offense  or  to  defraud 
the  United  States),  1005  (false  bank  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(wfre  fi-aud),  and  1344  (bank  fraud),  including  the  following: 

a.  Coramtinications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  tlie  person(s)  who  created  or  used  the  Subject  Accoimts; 
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b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  ^^^^^^^^^|md/or  entities  associated 
with  him; 

c.  Commimications,  records,  documents,  and  othei'  files  necessary  to  establish  the  identity 
of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 
communicated  with  the  Subject  Accounts  about  any  matters  relating  to  any  plan  or  proposal  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to|H^^|^m^|uid/or  entities  associated 
with  him; 

d.  Communications  between  the  Subject  Accounts  and  others,  including  employees  or 
representatives  of  Sterling  National  Bank,  Melrose  Credit  Union,  or  other  financial  institution(s), 
regarding  Michael  D.  Cohen’s  finances; 

e.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  pmpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 

£  Evidence  indicating  how  and  when  the  Subject  Accounts  was  accessed  or  used,  to 
determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  accormt  owner; 

g.  Evidence  indicating  the  Subject  Accounts  owners’  intent  as  it  relates  to  the  Subject 
Offenses  under  investigation. 
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IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  sepai'ate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Infonnation 
Associated  with  the  Email  Accoimts 
^^^^^^l^gmail.com, 
^^^l^gmail.com,  and 

i.  Maintained  at 
Premises  Controlled  by  Google,  Inc., 
USAO  Reference  No.  2018R00127 


18  MAG  2877 


— — Search  Warrant  and  Non-Disclosure  Order 

TO:  Google,  Inc.  (“Provider”) 

United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  the  Federal 

Bureau  of  Investigation  (collectively,  the  “Investigative  Agencies”) 

1.  Warrant.  Upon  an  affidavit  of  Special  Agent  the  United  States 

Attorney’s  Office  for  the  Southern  District  of  New  York,  and  puisuant  to  the  provisions  of  the 
Stored  Communications  Act,  18  U.S.C.  §  2703(b)(1)(A)  and  §  2703(c)(1)(A),  and  the  relevant 
provisions  of  Federal  Rule  of  Criminal  Procedure  41,  the  Court  hereby  finds  there  is  probable 
cause  to  believe  the  email  accounts  ^^^^^^^|@gmail.com,  ^^^^^gmail.com,  and 

,  maintained  at  premises  controlled  by  Google,  Inc.,  contain  evidence, 
fruits,  and  instrumentalities  of  crime,  all  as  specified  in  Attachments  A  and  B  hereto.  Accordingly, 
the  Provider  is  hereby  directed  to  provide  to  the  Investigative  Agencies,  within  7  days  of  the  date 
of  service  of  tliis  Warrant  and  Order,  the  records  specified  in  Section  II  of  Attachments  A  and  B 
hereto,  for  subsequent  review  by  law  enforcement  persomrel  as  authorized  in  Sections  III  and  IV 
of  Attachments  A  and  B.  The  Government  is  required  to  sei^ve  a  copy  of  this  Wairant  and  Order 
on  the  Provider  within  14  days  of  the  date  of  issuance.  The  Wan  ant  and  Order  may  be  served  via 
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electronic  transmission  or  any  other  means  through  which  the  Provider  is  capable  of  accepting 
service. 

2.  Non-Disclosure  Order.  Pursuant  to  18  U.S.C.  §  2705(b),  the  Court  finds  that  there  is 
reason  to  believe  that  notification  of  the  existence  of  this  wairant  will  result  in  in  destiiiction  of  or 
tampering  with  evidence  or  flight  fiom  prosecution,  or  otherwise  will  seriously  jeopardize  an 
ongoing  investigation.  Accordingly,  it  is  hereby  ordered  that  the  Provider  shall  not  disclose  the 
existence  of  this  Wanant  and  Order  to  the  listed  subscriber  or  to  any  other  person  for  a  period  of 
180  days  fiom  the  date  of  this  Order,  subject  to  extension  upon  application  to  the  Court  if 
necessaiy,  except  that  Provider  may  disclose  this  Wanant  and  Order  to  an  attorney  for  Provider 
for  the  puipose  of  receiving  legal  advice. 

3.  Sealing.  It  is  further  ordered  that  this  Warrant  and  Order,  and  the  Affidavit  upon  which 
it  was  issued,  be  filed  under  seal,  except  that  the  Government  may  without  further  order  of  this 
Court  seiwe  the  Warrant  and  Order  on  the  Provider;  provide  copies  of  the  Affidavit  or  Warrant  and 
Order  as  need  be  to  personnel  assisting  the  Government  in  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure 
obligations  in  any  prosecutions  related  to  tliis  matter. 

DatediNew  York,  New  York 

/>7 

Date  Issued  Time  Issued 

HOiNORABLMfENRY  B.  PITMAN 
UNITED  STATES  MAGISTRATE  JUDGE 
Southern  Disfiict  of  New  York 


2017.03J25 
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Email  Search  Attachment  A 
1.  Subject  Account  and  Execution  of  Warrant 

This  wanant  is  directed  to  Google,  Inc.  (the  “Provider”),  headquailered  at  1600 
Amphitheatre  Parkway,  Mountain  View,  Califomia  94043,  and  applies  to  all  content  and  other 
information  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email  account 
)gmail.com  (the  “Subject  Account”)  for  the  time  period  referenced  below. 

A  law  enforcement  officer  will  seiwe  this  wanant  by  transmitting  it  via  email  or  another 


appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  elechronic  copy  of  the  information  specified  in  Section  11  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  III  below. 

II.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Account: 

a.  Email  content.  All  emails  sent  to  or  fi-om,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Account,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email) 
limited  to  items  sent,  received,  or  created  between  November  14,  2017  and  February  28,  2018, 
inclusive. 


b.  Address  book  information.  All  address  book,  contact  list,  or  similai-  information 
associated  with  the  Subject  Account. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  infoimation 
regarding  the  Subject  Account,  including  but  not  limited  to  name,  username,  address,  telephone 
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number,  alternate  email  addresses,  registi’ation  IP  address,  accoimt  creation  date,  account  status, 
length  of  sei-vice,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 

d.  Transactional  records.  All  tiansactional  records  associated  with  the  Subject  Account, 
including  any  IP  logs  or  otlier  records  of  session  times  and  durations,  limited  to  items  sent, 
received,  or  created  between  December  1, 2014  and  February  28, 2018,  inclusive. 

e.  Customer  correspondence.  All  conespondence  with  the  subscriber  or  others  associated 
witir  the  Subject  Account,  including  complaints,  inquiries,  or  other  contacts  with  supporl  services 
and  records  of  actions  taken,  limited  to  items  sent,  received,  or  created  between  December  1, 2014 
and  Febnrary  28, 2018,  inclusive. 

f.  Search  History.  All  sear'ch  history  and/or  web  history  associated  with  the  Subject 
Accormt,  limited  to  items  sent,  received,  or  created  between  December  1,  2014  and  Febrorary  28, 
2018,  inclusive. 

g.  Associated  content.  All  Google  Docs,  files  maintained  on  Google  Drive,  and  instant 
messages  or  Gchats  associated  with  the  Subject  Account,  limited  to  items  sent,  received,  or  created 
between  December  1, 2014  and  February  28,  2018,  inclusive. 

h.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preseiwation  request  issued  pursuant  to  1 8 
U.S.C.  §  2703(f)  or  otherwise. 

III.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
govermnent  in  this  investigation,  and  outside  teclinical  experts  under  government  conhol)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits. 
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and  instrumentalities  of  18  U.S.C.  §§  371  (conspiracy  to  commit  offense  or  to  defraud  the  United 
States),  1005  (false  bank  entries);  1014  (false  statements  to  a  financial  institution),  1343  (wire 
fraud),  and  1344  (bank  fraud),  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Account; 

b.  Communications,  records,  documents,  and  other  files  involving  Sterling  National 
Bank,  Melrose  Credit  Union,  and/or  taxi  medallions; 

c.  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  others,  including  to^^^^^^^^^|and/or 
entities  associated  with  him; 

d.  Cormnunications,  records,  documents,  and  other  files  involving  Essential  Consultants, 
LLC  or  Michael  D.  Cohen  &  Associates,  including  those  which  indicate  the  nature  and  purpose  of 
payments  made  to  or  from  Essential  Consultants  or  Michael  D.  Cohen  &  Associates; 

e.  Communications,  records,  documents,  and  other  files  necessaiy  to  establish  the  identity 
of  any  person(s)  —  including  records  that  reveal  the  whereabouts  of  the  person(s)  —  who 
communicated  with  the  Subject  Account  about  any  matters  relating  to  Essential  Consultants,  LLC, 
or  about  any  plan  or  proposal  or  agreement  for  Michael  D.  Cohen  and/or  entities  associated  with 
him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or  liabilities,  to  others, 
including  tc^^^^^^^^^and/or  entities  associated  with  him; 

f.  Communications  between  the  Subject  Account  and  Jeffrey  Getzel  relating  to  Michael 
D.  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 
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g.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  puipose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  soui'ce  of  funds  flowing  into  an  account;  or  tlie  puipose  or  nature  of  any  financial  tiansactions 
involving  that  financial  institution; 

h.  Evidence  indicating  how  and  when  the  Subject  Account  was  accessed  or  used,  to 
determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner;  and 

i.  Evidence  indicating  the  Subject  Account  owner’s  intent  as  it  relates  to  the  Subject 
Offenses  under  investigation. 

IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to  established 
procedures  designed  to  collect  evidence  in  a  maimer  reasonably  designed  to  protect  any  attorney- 
client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include  use  of  a 
designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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Email  Search  Attachment  B 
I.  Subject  Account  and  Execution  of  Warrant 

This  wari'ant  is  directed  to  Google,  Inc.  (the  “Provider”),  headquartered  at  1600 
Amphitheati-e  Parkway,  Mountain  View,  California  94043,  and  applies  to  all  content  and  other- 
information  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email 
accounts ^^|@gmail.com  and  (the  “Subject  Accoimts”)  for  tlie  time 

period  between  October  1, 2016  and  Febr-uar-y  28, 2018,  inclusive. 

A  law  enforcement  officer  will  serve  this  wanant  by  transmitting  it  via  email  or  another 
appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  II  below.  Upon  receipt  of  the 
production,  law  enforcement  persormel  will  review  tire  information  for  items  falling  within  the 
categories  speeifred  in  Section  III  below. 

II.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  tire  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Accounts: 

a.  Email  content.  All  emails  sent  to  or  from,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Accounts,  including  all  message  content,  attachments,  and  header- 
information  (specifically  including  tire  sour-ce  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email). 

b.  Address  hook  information.  All  address  book,  contact  list,  or  similar-  information 
associated  with  the  Subject  Accounts. 
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c.  Subscriber  and  payment  information.  All  subscriber  and  payment  infoimation 
regarding  the  Subject  Accounts,  including  but  not  limited  to  name,  username,  address,  telephone 
number,  alternate  email  addresses,  regishation  IP  address,  account  creation  date,  account  status, 
length  of  service,  types  of  sei'vices  utilized,  means  and  source  of  payment,  and  payment  history. 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Accomits, 
including  any  IP  logs  or  other  records  of  session  times  and  durations. 

e.  Customer  correspondence.  All  coirespondence  witli  the  subscriber  or  others  associated 
with  the  Subject  Accounts,  including  complaints,  inquiries,  or  other  contacts  with  support  services 
and  records  of  actions  taken. 

f.  Search  Hisloty.  All  search  history  and/or  web  history  associated  with  the  Subject 
Accounts. 

g.  Associated  content.  All  Google  Docs,  files  maintained  on  Google  Drive,  and  instant 
messages  or  Gchats  associated  with  the  Subject  Accounts. 

h.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  presei*vation  request  issued  pursuant  to  1 8 
U.S.C.  §  2703(f)  or  otlierwise. 

III.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  govermnent,  attorney  support  staff,  agency  personnel  assisting  the 
govermnent  in  this  investigation,  and  outside  technical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fi-uits, 
and  instrumentalities  of  violations  of  1 8  U.S.C.  §§  37 1  (conspiracy  to  connnit  offense  or  to  defraud 
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the  United  States),  1 005  (false  bank  entries);  1014  (false  statements  to  a  financial  institution),  1 343 
(wire  fraud),  and  1344  (bank  fraud),  including  the  following: 

a.  Commimications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  tlie  person(s)  who  created  or  used  the  Subject  Accounts; 

b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  Irim  to  fransfer  any  interest  in  taxi 


medallions,  and  any  associated  debts  or  liabilities,  to! 
with  him; 


and/or  entities  associated 


c.  Commimications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  —  who 
communicated  with  the  Subject  Accounts  about  any  matters  relating  to  any  plan  or  proposal  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  fransfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to^^^^^^^^^|and/or  entities  associated 
with  him; 

d.  Communications  between  tlie  Subject  Accounts  and  others,  including  employees  or 
representatives  of  Sterling  National  Bank,  Melrose  Credit  Union,  or  other  financial  institution(s), 
regarding  Michael  D.  Cohen’s  finances; 

e.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  pmpose  of  an  accoimt  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  pmpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 
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f.  Evidence  indicating  how  and  when  the  Subject  Accoimts  was  accessed  or  used,  to 
deteimine  tlie  geographic  and  clironological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner; 

g.  Evidence  indicating  the  Subject  Accoimts  owners’  intent  as  it  relates  to  the  Subject 
Offenses  under  investigation. 

IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedm-es  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apaif  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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AO  93  (SONY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 
In  the  Matter  of  the  Search  of  ) 

(Briefly  describe  the  property  to  be  searched  ) 

or  identify  the  person  by  name  and  address)  )  Case 

Three  Electronic  Devices,  See  Attachment  A  ^ 

) 

SEARCH  AND  SEIZURE  WARRANT 

Tar"~~Any"authorizediaw"enf^^^  - - - — 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 
ofthe  following  person  or  property  located  in  the  _ Southern  District  of  _ New  York 

(identify  the  person  or  describe  the  property  to  he  searched  and  give  its  location)'. 

Three  Electronic  Devices,  See  Attachment  A 


The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)  \ 


See  Attachment  A  1 1  mm,, 

.  ’  '  '  i  M 

I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  sdize  the  person  or 
property.  zV’  .  '  / 

YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before  /B-  ■  . ^  f :  -  -  '  ; 

'  ,  flnotto  exceed  14  days) 

□  in  the  daytime  6:00  a.m.  to  10  p.m.  sT  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

established. 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  ofthe  warrant  aiid  hrebeipt  fof  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  hhd  receipt  at  the 
place  where  the  property  was  taken. 


The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  wan*ant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  of  theUourt.  ^ 

y  Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  by  Glbrk  of  the  Court: 

,  *  ’  ■  ^  ,  '  ‘  USMJ Initials 

Sf  i  find  that  immediate  notification  may  have  an  adverse  result  listed  ih  i  S  UbS.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  thd  ;^erson  who,  or  whose- propeify,  will  be 
SGenched  OT  SQlZod  (check  the  appropriate  box)  Sffor  30  days  (not  to  exceedflO),  \  ' 


□until,  the  facts  justifying,  the  latef  specific  date  of 


Date  and  time  issued: 


Judge 's  sighdtuM  ' 


City  and  state:  New  York.  NY 


Hon.  Henry  B.  Pitman.  U.S.  Magistrate  Judge 

Printed  name  and  title 
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AO  93  (Rev.  01/09)  Search  and  Seizure  Warrant  (Page  2) 


Return 

Case  No.: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 

Certification 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court. 


Date:  _  _ 

Executing  officer 's  signature 


Printed  name  and  title 
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Attachment  A  T 

I 

I.  Devices  to  be  Searched  I 

I 

The  devices  to  be  searched  (the  “Subject  Devices”)  are  described  as:  I 

a.  Subject  Device-1 :  A  black  and  red  USB  drive  with  a  white  label  that  says  “Tracking  | 

#:  180208140208.”  I 

h.  Subject  Device-2:  A  silver  DVD  with  a  white  label  that  reads  “Cohen  — 

2018.03.07.”  [ 


c.  Subject  Device-3:  A  white  DVD  labelled  “2-28-18  Cohen  SW  Returns  —  Google  f 

_ _ and  l&l.”  . . - .  . - . .  --  -  _  I 

I 

n.  Review  of  ESI  on  the  Subject  Devices 

I 

Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and  agents,  S 

and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and  related  proceedings,  ^ 

attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the  government  in  jj 

this  investigation,  mterpreters,  and  outside  vendors  or  technical  experts  under  government  control)  [i 

are  authorized  to  review  the  ESI  contained  on  the  Subject  Devices  for  evidence,  fiuits,  and  1 

instrumentalities  of  one  or  more  violations  of  52  U.S.C.  §§  301 16(a)(1)(A)  and  30109(d)(l)(A)(l)  j 

(illegal  campaign  contributions)  (the  “Subject  Offense”),  as  listed  below:  | 

r 

I 

a.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their  1 

i 

I 

agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  | 


documents,  and  any  communications  related  to  such  agreements. 


h.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 


agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen 
McDougal,  or  payments  to  Stephanie  Clifford  or  Karen  McDougal. 


c.  Evidence  of  communications  with  American  Media,  Inc.,  David  Pecker,  and/or 


Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie  Clifford, 
and/or  Karen  McDougal. 

d.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 
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e.  Evidence  of  commimications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape. 

f.  Evidence  relating  to  Cohen’s  laiowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

g.  Evidence  indicating  Michael  Cohen’s  intent  with  respect  to  the  Subject  Offense, 
including  whether  the  payment  to  Clifford  and  any  similar  payments  were  made  to 
influence  the  Presidential  election. 
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AO  106  (Rev.  06/09)  Application  for  a  Search  Warrant 


United  States  District  Court 


for  the 

Southern  District  of 


In  the  Matter  of  the  Search  of 


(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

Three  Electronic  Devices,  See  Attachment  A 


Case  No. 


APPLICATION  FOR  A  SEARCH  WARRANT 


h  a  federal  law  enforcement  officer  or  an  attorney  for  the  government,  request  a  search  warrant  and  state  under 
penalty  of  perjury  that  I  have  reason  to  believe  that  on  the  following  person  or  property  (identify  the  person  or  describe  the 
uroDErtv  to  be_searched  and.siveJts  location'll.. 

— — - - — . •  — - 

~TK«tt  Ocvv'cr^  Im 

located  in  the  _ Southern _  District  of _ New  York _ ,  there  is  now  concealed  (identify  the 

person  or  describe  the  property  to  be  seized)', 

PLEASE  SEE  ATTACHED  AFFIDAVIT  AND  RIDER. 

The  basis  for  the  search  under  Fed.  R.  Grim.  P,  41(c)  is  (check  one  or  more)'. 
sf  evidence  of  a  crime; 

□  contraband,  fruits  of  crime,  or  other  items  illegally  possessed; 

□  property  designed  for  use,  intended  for  use,  or  used  in  committing  a  crime; 

□  a  person  to  be  arrested  or  a  person  who  is  unlawfully  restrained. 

The  search  is  related  to  a  violation  of: 


Code  Section 

52  DSC  301 1 6(a)(1  )(A),  301 09  liiegal  campaign  contributions 
(d)(1)(A)(1) 


Offense  Description 


The  application  is  based  on  these  facts: 

PLEASE  SEE  ATTACHED  AFFIDAVIT  AND  RIDER. 

fif  Continued  on  the  attached  sheet. 

sf  Delayed  notice  of  30  days  (give  exact  ending  date  if  more  than  30  days: 
under  1 8  U.S.C.  §  3 103  a,  the  basis  of  which  is  set  forth  on  the  attached  sheet 


)  is  requested 


Sworn  to  before  me  and  signed  in  my  presence. 
Date:  V-  .7- 

City  and  state:  A/ 0'^ 


^  .  '  Judge  ’s  signature 

Hon.  Henry:  b!  Pithian,  U.^.  Magistrate  Judge 

Printed  hame  and  title 
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TO  BE  FILED  UNDER  SEAL 

Agent  Affidavit  in  Support  of 
Application  for  a  Search  Warrant 


Special  Agent  m||m||||||m  of  the  United  States  Attorney’s  Office  for  the  Southern 
DiMfict  ofNew^YarEr(“USAO’’)7heih^uryswdihrdeposes  and  says: 

I.  Introduction 
A.  Affiant 

1 .  I  have  been  a  Special  Agent  with  the  U S  AO  since  August  2016.  1  previously  served 
as  a  Special  Agent  with  the  United  States  Department  of  Labor  Inspector  General  from  May  201 1 
to  August  2016.  In  the  course  of  my  experience  and  training  in  these  positions,  1  have  participated 
in  criminal  investigations  into  federal  offenses  involving  a  wide  array  of  financial  crimes, 
including  frauds  on  financial  institutions,  and  have  been  involved  in  investigations  involving 
violations  of  campaign  finances  laws  and  regulations.  I  also  have  training  and  experience 
executing  search  warrants,  including  those  authorizing  the  search  of  email  accounts  and  electronic 
devices. 

2.  I  make  this  Affidavit  in  support  of  an  application  pursuant  to  Rule  41  of  the  Federal 
Rules  of  Criminal  Procedure  for  a  warrant  to  search  the  electronic  devices  specified  below  (the 
“Subject  Devices”)  for  the  items  and  information  described  in  Attachment  A.  This  affidavit  is 
based  upon  my  personal  knowledge;  my  review  of  documents  and  other  evidence;  my 
conversations  with  other  law  enforcement  personnel;  and  my  training,  experience  and  advice 
received  concerning  the  use  of  computers  in  criminal  activity  and  the  forensic  analysis  of 


UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  the  Application  of  the  United 
States  Of  America  for  a  Search  Warrant  for  Three 
Electronic  Devices,  USAO  Reference  No 
2018R00127 


SOUTHERN  DISTRICT  OF  NEW  YORK)  ss.: 
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electronically  stored  information  (“ESI”).  Because  this  affidavit  is  being  submitted  for  the  limited 
purpose  of  establishing  probable  cause,  it  does  not  include  all  the  facts  that  I  have  learned  during 
the  course  of  my  investigation.  Where  the  contents  of  documents  and  the  actions,  statements,  and 
conversations  of  others  are  reported  herein,  they  are  reported  in  substance  and  in  part,  except  where 
otherwise  indicated. 

B.  Prior  Warrants  and  the  Subject  Devices 

3.  The  USAO  and  the  Federal  Bureau  of  Investigation  (“FBI”)  have  been 
investigating,  among  other  things,  a  scheme  by  Michael  Cohen  to  defraud  multiple  banks.  Cohen 
is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President  Donald  Trump, 
and  who  previously  served  for  over  a  decade  as  an  executive  in  the  Trump  Organization,  an 
international  conglomerate  with  real  estate  and  other  holdings. 

4.  In  connection  with  an  investigation  then  being  conducted  by  the  Office  of  the 
Special  Counsel  (“SCO”),  the  FBI  sought  and  obtained  from  the  Honorable  Beryl  A.  Howell,  Chief 
United  States  District  Judge  for  the  District  of  Columbia,  three  search  warrants  for  emails  and 
other  content  information  associated  with  two  email  accounts  used  by  Cohen,  and  one  search 
warrant  for  stored  content  associated  with  an  iCloud  account  used  by  Cohen.  Specifically; 

a.  On  or  about  July  18, 2017,  the  FBI  sought  and  obtained  a  search  warrant  for 
emails  in  the  account^^^^^^^|^gmail.com  (the  “Cohen  Gmail  Accounf ’)  sent  or  received 
between  January  1,  2016  and  July  18,  2017.  This  warrant,  which  is  numbered  17-mj-00503,  is 
attached  as  Exhibit  A  (the  “First  Cohen  Gmail  Warrant”). 

b.  On  or  about  August  8,  2017,  the  FBI  sought  and  obtained  a  search  warrant 
for  content  stored  in  the  iCloud  account  associated  with  Apple  ID  ^^^^^^|@gmail.com  (the 
“Cohen  iCloud  Account”).  This  warrant,  which  is  numbered,  17-mj-00570,  is  attached  as  Exhibit 
D  (the  “Cohen  iCloud  Warrant”). 
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c.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  search 
warrant  for  emails  in  the  Cohen  Gmail  Account  sent  or  received  between  Time  1,  2015  and 
November  13, 2017.  This  warrant,  which  is  numbered  17-mj-00855,  is  attached  as  Exhibit  B  (the 
“Second  Cohen  Gmail  Warrant”). 

d.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  search 
warrant  for  emails  in  the  account^^^^^^^^^^^^^^the  “Cohen  MDCPC  Account”)  sent  or 
received  between  the  opening  of  the  Cohen  MDCPC  Account^  and  November  13,  2017.  This 
warrant,  which  is  numbered  17-mj-00854,  is  attached  as  Exhibit  C  (the  “First  Cohen  MDCPC 
Warrant”). 

5.  The  SCO  has  since  referred  certain  aspects  of  its  investigation  into  Cohen  to  the 
US  AO,  which  is  worldng  with  the  FBI’s  New  York  Field  Office.  As  part  of  that  referral,  on  or 
about  February  8,  2018,  the  SCO  provided  the  USAO  with  all  non-privileged  emails  and  other 
content  information  obtained  pursuant  to  the  First  Cohen  Gmail  Warrant,  Second  Cohen  Gmail 
Warrant,  and  Cohen  MDCPC  Warrant.  On  or  about  March  7,  2018,  the  SCO  provided  the  USAO 
with  all  non-privileged  content  obtained  pursuant  to  the  Cohen  iCloud  Warrant.^  A  filter  team 
working  with  the  SCO  had  previously  reviewed  the  content  produced  pursuant  to  these  warrants 
for  privilege. 

6.  On  or  about  February  28,  20 1 8,  the  USAO  sought  and  obtained  search  warrants  for 
emails  in  Cohen  Gmail  Account  and  Cohen  MDCPC  Account,  among  other  accounts,  sent  or 

^  Based  on  my  review  of  this  warrant  and  the  affidavit  in  support  of  it,  I  know  that  the  warrant  did 
not  specify  a  time  period,  but  the  affidavit  indicated  that,  pursuant  to  court  order,  the  service 
provider  had  provided  non-content  information  for  the  Cohen  MDCPC  Account  that  indicated  that 
the  accormt  contained  emails  from  the  approximate  period  of  March  2017  through  the  date  of  the 
warrant. 

^  The  SCO  had  previously  provided  a  subset  of  this  non-privileged  content  on  or  about  February 
2, 2018. 
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received  between  November  14,  2017  and  February  28,  2018.  These  warrants,  which  are  both 
numbered  1 8  Mag.  1696,  are  attached  as  Exhibits  E  (the  “Third  Cohen  Gmail  Warrant”)  and  F  (the 
“Second  Cohen  MDCPC  Warrant”),  respectively.  The  content  produced  pursuant  to  these 
warrants  is  being  reviewed  for  privilege  by  an  SDNY  filter  team. 

7.  The  search  warrants  described  above  are  referred  to  collectively  herein  as  the  “Prior 
Warrants.” 

8.  The  returns  of  the  Prior  Warrants  are  presently  contained  on  three  electronic 
devices.  In  particular: 

a.  Subject  Device-1:  The  non-privileged  emails  and  content  returned  in 
response  to  the  First  Cohen  Gmail  Warrant,  the  Second  Cohen  Gmail  Warrant,  and  the  First  Cohen 
MDCPC  Warrant  are  contained  on  Subject  Device- 1,  which  is  particularly  described  as  a  black 
and  red  USB  drive  with  a  white  label  that  says  “Tracking  #:  180208140208.” 

b.  Subject  Device-2:  The  non-privileged  content  returned  in  response  to  the 
Cohen  iCloud  Warrant  is  contained  on  Subject  Device-2,  which  is  particularly  described  as  one 
silver  DVD  with  a  white  label  that  reads  “Cohen  —  201 8.03.07.” 

c.  Subject  Device-3:  The  content  returned  in  response  to  the  Third  Cohen 
GmaU  Warrant  and  the  Second  Cohen  MDCPC  Warrant  is  contained  on  Subject  Device-3,  which 
is  particularly  described  as  one  white  DVD  labelled  “2-28-18  Cohen  SW  Returns  —  Google  and 
l&l.” 

9.  The  Subject  Devices  are  presently  located  in  the  Southern  District  of  New  York. 

C.  The  Subject  Offenses 

10.  The  affidavits  in  support  of  the  Prior  Warrants  describe  evidence  of  several 
different  courses  of  conduct  by  Cohen,  including,  among  other  things,  false  statements  to  financial 

institutions  relating  to  the  purpose  of  an  account  he  opened  in  the  name  of  Essential  Consultants 
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LLC  and  the  nature  of  funds  flowing  into  that  account;  false  statements  and  fraudulent  omissions 
by  Cohen  in  connection  with  this  attempt  to  refinance  his  debts  with  certain  financial  institutions; 
and  activities  undertaken  by  Cohen  on  behalf  of  certain  foreign  persons  or  foreign  entities  without 
having  registered  as  a  foreign  agent.  The  Prior  Warrants  accordingly  define  the  evidence  to  be 
seized  by  reference  to  subject  offenses  and  specific  categories  of  information  related  to  these 


courses  of  conduct.  The  subject  offenses  in  the  Prior  Warrants  are  summarized  as  follows: 


Exhibit 

Warrant 

3 

Subiect  Offenses  in  Prior  Warrant 

A 

First  Cohen  Gmail 

18  U.S.C,  §§371  (conspiracy  to  defraud  the  United  States),  1005  (false 

Warrant 

bank  entries),  1014  (false  statement  to  financial  institution),  1343  (wire 
fraud),  1344  (banlc  fraud),  1956  (money  laimdering),  951  (acting  as  an 
unregistered  foreign  agent),  and  22  U.S.C,  §§  611  etseq.  (Foreign  Agents 
Registration  Act  (“FARA”)) 

B 

Second  Cohen  Gmail 
Warrant 

18  U.S.C.  §§371  (conspiracy  to  defraud  the  United  States),  1005  (false 
bank  entries),  1014  (false  statement  to  financial  institution),  1343  (wire 
fraud),  1344  (bank  fraud),  1956  (money  laundering),  951  (acting  as  an 
unregistered  foreign  agent),  and  22  U.S.C.  §§611  etseq.  (FARA) 

C 

Cohen  MDCPC  Warrant 

18  U.S.C.  §§371  (conspiracy  to  defraud  the  United  States),  1005  (false 
bank  entries),  1014  (false  statement  to  financial  institution),  1343  (wire 
fraud),  1344  (bank  fraud),  1956  (money  laimdering),  951  (acting  as  an 
unregistered  foreign  agent),  and  22  U.S.C.  §§611  etseq.  (FARA) 

D 

Cohen  iCloud  Warrant 

18  U.S.C.  §§  1014  (false  statement  to  financial  institution),  1344  (bank 
fraud),  1956  (money  laundering),  951  (acting  as  an  unregistered  foreign 
agent),  and 22  U.S.C.  §§  611  etseq.  (FARA) 

E 

Third  Cohen  Gmail 
Warrant 

18  U.S.C. §§371  (conspiracy  to  commit  offense  or  to  defraud  the  United 
States),  1005  (false  bank  entries),  1014  (false  statements  to  financial 
institution),  1343  (wire  fraud),  1344  (banlc  fraud) 

F 

Second  Cohen  MDCPC 
Warrant 

18  U.S.C. §§371  (conspiracy  to  commit  offense  or  to  defraud  the  United 
States),  1005  (false  bank  entries),  1014  (false  statements  to  financial 
institution),  1343  (wire  fraud),  1344  (bank  fraud) 

1 1 .  Based  on  my  participation  in  this  investigation,  including  my  review  of  documents 
obtained  pursuant  to  subpoena  and  court  order,  my  conversations  with  witnesses  and  review  of 
reports  of  conversations  with  witnesses,  and  my  review  of  publicly  available  information,  I  have 


^  On  or  about  February  28, 2018,  the  USAO  sought  and  obtained  a  Rule  41  warrant,  authorizing  it 
to  expand  its  search  of  the  email  returns  for  the  warrants  attached  as  Exhibits  A-C  (the  First  Cohen 
Gmail  Warrant,  Second  Cohen  Gmail  Warrant,  and  First  Cohen  MDCPC  Warrant)  for  additional 
offenses  not  authorized  in  the  original  warrants  for  those  accounts.  The  below  chart  therefore  lists 
both  the  subject  offenses  listed  in  the  original  warrants  for  these  accounts  and  the  subject  offenses 
authorized  in  the  February  28,  2018  warrant. 
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learned  of  evidence  of  an  additional  Subj  ect  Offense  committed  by  Cohen,  described  below,  which  f 

r 

was  not  listed  in  the  Prior  Warrants.'^  | 

12.  I  am  therefore  requesting  authority  to  expand  the  search  of  the  returns  of  the  Prior 

!■ 

Warrants,  as  contained  on  the  Subject  Devices,  for  evidence  related  to  the  additional  Subject 

I 

Offense.  As  set  forth  below,  in  addition  to  the  categories  of  evidence  aheady  described  in  the 
Prior  Warrants,  there  is  probable  cause  to  believe  that  the  Subject  Devices  contain  evidence  of 

violations  of  52  U.S.C.  §§  301 16(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions)  I 

.  .  . . .  ..  ...... .  | 

(the  “Subject  Offense”).^  ; 

II.  Probable  Cause  Regarding  the  Subject  Offense 

13.  As  set  forth  above,  the  USAO  and  the  FBI  have  been  investigating,  among  other 
things,  a  scheme  by  Michael  Cohen  to  defraud  multiple  banks.  During  the  course  of  this 
investigation,  the  U S  AO  and  FBI  have  obtained  evidence  that  Cohen  has  also  committed  a  criminal 

violation  of  the  campaign  finance  laws  by  making  an  excessive  in-kind  contribution  to  the  ! 

presidential  election  campaign  of  then-candidate  Donald  Trump  in  the  form  of  a  $  1 30,000  payment 

to  Stephanie  Clifford,  an  individual  who  was  rumored  to  have  had  an  extramarital  affair  with 

Trump,  in  exchange  for  her  agreement  not  to  disclose  that  alleged  affair.  As  set  forth  below,  there  t 

is  probable  cause  to  believe  that  this  payment  was  intended  to  keep  Clifford  from  making  public  ; 

statements  about  the  rumored  affair  on  the  eve  of  the  2016  presidential  election,  and  thus 

constitutes  a  campaign  contribution  in  excess  of  the  applicable  limit. 

^  As  set  forth  below,  I  base  this  application  in  part  on  my  review  of  emails  and  text  messages  I 

obtained  pursuant  to  the  Prior  Warrants.  Each  of  the  cited  emails  or  texts  messages  is  either  [ 

responsive  to  the  applicable  Prior  Warrant  and/or  was  discovered  in  plain  view  during  a  review  of  ; 

the  emails  or  texts  returned  pursuant  to  the  applicable  Prior  Warrant.  ; 

^  The  Prior  Warrants  describe  categories  of  information  that  likely  encompass  evidence  of  the  I 

additional  Subject  Offense.  Nevertheless,  in  an  abundance  of  caution,  I  am  seeking  explicit 
authorization  to  search  the  Subject  Devices  for  evidence  of  the  Subject  Offense. 
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14.  From  my  review  of  public  sources,  I  have  learned  the  following: 

a.  In  or  around  October  2011,  there  were  rumors  published  on  the  gossip  websites 
TheDirty.com  that  Trump  had  had  an  extramarital  affair  with  Clifford,  an  adult  film  actress  whose 
screen  name  is  Stormy  Daniels,  in  or  around  July  2006.  In  or  about  October  2011,  Life  &  Style 
Magazine,  a  tabloid  sold  in  supermarkets,  also  published  an  article,  based  on  the  report  in 
TheDirty.com,  alleging  an  affair  had  occurred  between  Trump  and  Clifford.  Both  Trump  and 
Clifford,  through  their  representatives,  issued  denials  in  response  to  the  articles. 

b.  Specifically,  on  or  about  October  1 1 ,  201 1 ,  Keith  Davidson,  who  identified  himself 
as  Clifford’s  attorney,  sent  a  cease  and  desist  letter  to  TheDirty.com,  demanding  that  the  article 
regarding  Trump  and  Clifford  be  removed  from  the  website.  Additionally,  on  or  about  October 
12,  2011,  Cohen,  who  was  then  Executive  Vice-President  and  Special  Counsel  to  the  Trump 
Organization,  stated  to  E!  News  that  “[t]he  totally  untrue  and  ridiculous  story  .  .  .  emanated  from 

a  sleazy  and  disgusting  website _ The  Trump  Organization  and  Donald  J.  Tramp  will  be  bringing 

a  lawsuit .  .  .  [and]  Mr.  Trump  and  the  Trump  Organization  would  like  to  thank  and  commend 
Stormy  Daniels  and  her  attorneys  for  their  honesty  and  swift  actions.” 

15.  On  or  about  June  16,  2015,  Tramp  formally  launched  his  2016  presidential 
campaign.  On  or  about  May  4,  2016,  Trump  became  the  presumptive  Republican  Party  nominee 
for  president,  and  on  July  19,  2016,  Tramp  officially  became  the  nominee.  Based  on  my  review 
of  public  sources,  I  have  learned  that  while  it  does  not  appear  that  Cohen  had  an  official  title  as 
part  of  the  Tramp  campaign,  on  multiple  occasions  Cohen  made  public  statements  on  behalf  of 
Trump  or  his  campaign.  For  instance,  on  or  about  August  18,  2016,  Cohen  appeared  on  CNN  to 
defend  Trump’s  polling  numbers. 
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16.  On  or  about  October  7,  2016,  The  Washington  Post  published  online  a  video  and 
accompanying  audio  in  which  Trump  referred  to  women  in  what  the  article  described  as  “vulgar 
terms”  in  a  2005  conversation  with  Billy  Bush,  who  was  then  the  host  of  Access  Hollywood.  The 
following  day,  on  October  8,  2016,  Trump  appeared  in  a  video  in  which  he  stated,  among  other 
things,  “I’ve  said  and  done  things  I  regret  and  words  released  today  on  this  more  than  a  decade  old 
video  are  one  of  them.  Anyone  who  knows  me  knows  these  words  don’t  reflect  who  I  am.  I  said 
it.  I  was  wrong  and  I  apologize.”  Based  on  my  review  of  public  sources,  I  also  know  that 
representatives  of  the  Trump  Campaign  stated,  in  sum  and  substance,  that  the  Access  Hollywood 
comment  was  an  old  and  isolated  incident. 

17.  Based  on  my  review  of  public  sources,  including  an  article  published  in  Slate 
magazine  by  a  reporter  who  interviewed  Clifford,  that  around  this  same  time,  in  or  about  October 
2016,  Clifford  was  in  discussions  with  ABC’s  Good  Morning  America  show  and  Slate  magazine, 
among  other  media  sources,  to  provide  these  media  outlets  with  her  statement  about  her  alleged 
relationship  with  Trump.  According  to  the  article  in  Slate,  which  the  author  based  on' 
conversations  'with  Clifford  over  the  telephone  and  by  text  message,  Clifford  wanted  to  be  paid  for 
her  story  or  be  paid  by  Trump  not  to  disclose  her  accusation.  As  ,  Cohen  summarized  in  a  2018 
email  obtained  pursuant  to  the  Cohen  Email  Warrants;  “In  October  2016,  I  was  contacted  by 
counsel  for  Ms.  Clifford  stating  that  news  outlets,  including  ABC  News,  were  pursuing  the  201 1 
story  of  an  alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.” 

18.  From  my  review  of  telephone  toll  records®  and  information  produced  pursuant  to 
the  iCloud  Warrant  and  Cohen  Email  Warrants,  I  have  learned  that  in  the  days  following  the  Access 

®  My  attribution  of  certain  telephone  numbers  to  certain  individuals  as  described  in  this 
affidavit  is  based  on  my  review  of  the  vCard  (virtual  contact  file)  obtained  from  Cohen’s  telephone 
pursuant  to  the  iCloud  Warrant. 
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Hollywood  video,  Cohen  exchanged  a  series  of  calls,  text  messages,  and  emails  with  Keith 
Davidson,  who  was  then  Clifford’s  attorney,  David  Pecker  and  Dylan  Howard  of  American  Media, 
Inc.  (“AMI”),  the  publisher  of  the  National  Enquirer^  Trump,  and  Hope  Hicks,  who  was  then 
press  secretary  for  Trump’s  presidential  campaign.  Based  on  the  timing  of  these  calls,  and  the 
content  of  the  text  messages  and  emails,  I  believe  that  at  least  some  of  these  communications 
concerned  the  need  to  prevent  Clifford  from  going  public,  particularly  in  the  wake  of  the  Access 
Hollywood  story.  In  particular,  I  have  learned  the  following: 

a.  On  October  8, 20 1 6,  at  approximately  7 :20  p  .m. ,  Cohen  received  a  call  from  Hicks. 
Sixteen  seconds  into  the  call.  Trump  joined  the  call,  and  the  call  continued  for  over  four  minutes.® 
Based  on  the  toll  records  that  the  US  AO  has  obtained  to  date,  I  believe  that  this  was  the  first  call 
Cohen  had  received  or  made  to  Hicks  in  at  least  multiple  weeks,  and  that  Cohen  and  Trump  spoke 
about  once  a  month  prior  to  this  date  -  specifically,  prior  to  this  call  on  October  8,  2016,  Cohen 
and  Trump  had  spoken  once  in  May,  once  in  June,  once  in  July,  zero  times  in  August,  and  twice 
in  September. 

b.  Approximately  ten  minutes  after  the  call  ended,  Hicks  and  Cohen  spoke  again  for 
about  two  minutes. 


’  Pecker  is  President  of  AMI  and,  according  to  his  own  statements  in  public  reports,  a  personal 
friend  of  Trump.  Howard  is  the  chief  content  officer  of  AMI,  who  according  to  public  records 
reports  directly  to  Pecker. 

®  I  believe  that  Trump  joined  the  call  between  Cohen  and  Hicks  based  on  my  review  of  toll 
records.  Specifically,  I  know  that  a  call  was  initiated  between  Cohen’s  telephone  number  and 
Trump’s  telephone  number  at  the  same  time  the  records  indicate  that  Cohen  was  talking  to  Hicks. 
After  the  Cohen-Trump  call  was  initiated,  it  lasted  the  same  period  of  time  as  the  Cohen-Hicks 
call.  Additionally,  the  toll  records  indicate  a  “-1”  and  then  Trump’s  telephone  number,  which, 
based  on  my  training  and  experience,  means  that  the  call  was  either  transferred  to  Trump,  or  that 
Trump  was  added  to  the  call  as  a  conference  or  three-way  call  participant.  In  addition,  based  on 
my  conversations  with  an  FBI  agent  who  has  interviewed  Hicks,  I  have  learned  that  Hicks  stated, 
in  substance,  that  to  the  best  of  her  recollection,  she  did  not  learn  about  the  allegations  made  by 
Clifford  until  early  November  2016.  Hicks  was  not  specifically  asked  about  this  three-way  call. 
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c.  At  7:39  p.m.,  immediately  after  the  second  call  with  Hicks  ended,  Cohen  called 
David  Pecker  (as  noted  above,  the  President  of  American  Media  Inc.,  or  AMI)  and  they  connected 
for  thirty  seconds.  Approximately  four  minutes  later,  Cohen  called  Pecker  again  and  they  spoke 
for  more  than  a  minute.  Three  minutes  after  ending  his  call  with  Pecker,  Cohen  received  a  call 
from  Dylan  Howard  (as  noted  above,  the  Chief  Content  Officer  of  AMI),  and  they  spoke  for 
approximately  a  minute.  According  to  toll  records,  it  does  not  appear  that  Cohen  and  Howard 
spoke  regularly  prior  to  October  8,  2016,  as  it  had  been  over  a  month  since  they  had  called  each 
other. 

d.  At  7:56  p.m.,  approximately  eight  mmutes  after  his  call  with  Howard  ended,  Cohen 
called  Hicks  and  they  connected  for  two  minutes.  At  approximately  the  same  time  this  call  ended, 
Cohen  received  a  call  from  Pecker,  and  they  spoke  for  about  two  minutes.  At  8:03  p.m.,  about 
three  minutes  after  ending  his  call  with  Pecker,  Cohen  called  Trump,  and  they  spoke  for  nearly 
eight  minutes. 

e.  At  8:39  p.m.  and  8:57  p.m.,  Cohen  received  calls  from  Howard  and  spoke  to  him 
for  about  four  and  six  minutes,  respectively.  At  9:13  p.m.,  about  ten  minutes  after  Cohen  and 
Howard  hung  up  from  the  second  of  these  calls,  Howard  sent  Cohen  a  text  message  that  said: 
“Keith  will  do  it.  Let’s  reconvene  tomorrow.”  Based  on  my  involvement  in  this  investigation,  I 
believe  that  when  Howard  vwote  “Keith,”  he  was  referring  to  Keith  Davidson,  the  attorney  for 
Stephanie  Clifford.  At  3 :3 1  a.m.,  now  on  October  9,  20 1 6,  Cohen  sent  Howard  a  text  message  in 
response  that  said:  “Thank  you.”  Eight  minutes  later,  Cohen  sent  Howard  a  text  message  that  said: 
“Resolution  Consultants  LLC.  is  the  name  of  the  entity  I  formed  a  week  ago.  Whenever  you  wake, 
please  call  my  cell.” 
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I- 

I 

f.  The  following  day,  on  October  10, 2016,.  at  10:58  a.m.,  Howard  sent  a  text  message  | 

to  Cohen  and  Davidson,  which  stated:  “Keith/Michael:  coimecting  you  both  in  regards  to  that 
business  opportunity.  Spoke  to  the  client  this  AM  and  they’re  confirmed  to  proceed  with  the 
opportunity.  Thanks.  Dylan.  Over  to  you  two.”  At  1 2:25  p.m.,  Davidson  sent  Cohen  a  text  message 
that  stated:  “Michael  —  if  we  are  ever  going  to  close  this  deal  —  In  my  opinion,  it  needs  to  be  today. 

Keith.”  Davidson  and  Cohen  then  spoke  by  phone  for  about  three  minutes.  Based  on  my 
participation  in  this  investigation,  I  believe  that  when  Howard  wrote  that  the  “cUent”  was 
“confirmed  to  proceed  with  the  opportunity,”  he  was  referring  to  Clifford’s  agreement  in  principle 
to  accept  money  from  Cohen  in  exchange  for  her  agreement  not  to  discuss  any  prior  affair  with 
then-candidate  Trump.^ 

g.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
know  that  on  or  about  October  10, 2016,  Clifford  and  Davidson  appear  to  have  signed  a  “side  letter 
agreement”  that  stated  it  was  an  exhibit  to  a  “confidential  settlement  agreement  and  mutual 
release”  between  “Peggy  Peterson”  and  “David  Dennison.”  The  purpose  of  the  document, 
according  to  the  agreement,  was  to  define  the  “true  name  and  identity”  of  persons  named  by 
pseudonym  in  “confidential  settlement  agreement  and  mutual  release.”  The  side  letter  agreement 
specifies  the  identity  of  “Peggy  Peterson”  to  be  Clifford,  but  the  space  for  “Dennison’s”  identity 
is  blank.  The  agreement  also  includes  a  signature  page  for  “Peterson,”  “Dennison,”  and  their 
attorneys.  The  signature  page  is  signed  by  “Peterson”  and  his  attorney,  Davidson,  but  the 

^  As  set  forth  below,  AMI  was  also  involved  in  a  payment  to  model  Karen  McDougal. 

However,  because  these  communications  were  in  close  temporal  proximity  to  the  events  involving 
the  negotiation  of  a  pa)mient  to  Clifford,  the  execution  of  the  agreement  with  Clifford,  and  the 
payment  of  money  to  Clifford,  I  believe  that  these  communications  were  related  to  Clifford. 

Additionally,  based  on  my  review  of  public  statements  by  McDougal,  I  have  learned  that  she 
negotiated  an  agreement  with  AMI  several  months  prior  to  these  communications  between  Cohen 
and  Pecker,  Howard,  and  Davidson. 
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document  is  unsigned  by  “Dennison”  and  his  attorney.  Based  on  my  involvement  in  this 
investigation,  I  believe  that  Davidson  sent  Cohen  this  partially-signed  “side  letter  agreement”  in 
order  to  facilitate  the  closing  of  a  deal  between  Davidson’s  client  and  Cohen  or  his  client  on 
October  10,  2016. 

19.  It  appears  that  on  October  13,  2016,  and  the  days  that  followed,  Cohen  took  steps 
to  complete  a  transaction  with  Davidson,  including  attempting  to  open  an  account  from  which 
Cohen  could  transfer  funds  to  Davidson.  Specifically,  from  my  review  of  toll  records,  information 
obtained  pursuant  to  the  iCloud  Warrant  and  Cohen  Email  Warrants,  records  maintained  by  First 
Republic,  as  well  as  my  participation  in  interviews  with  First  Republic  employees,  I  have  learned 
the  following: 

a.  On  the  morning  of  October  1 3, 201 6,  at  8 : 54  a.m.,  Cohen  sent  Pecker  a  text  message 
that  stated:  “I  need  to  talk  to  you.”  At  9:06  a.m..  Pecker  sent  a  text  message  to  Cohen  that  stated, 
“I  called  please  call  me  back.”  The  tolls  between  Cohen  and  Pecker  do  not  show  a  telephone  call 
between  8:54  a.m.  and  9:06  a.m.  However,  based  on  my  review  of  text  messages,  I  have  learned 
that  Cohen  and  Pecker  communicate  with  each  other  over  Signal,  which  is  an  encrypted 
communications  cellphone  application  that  allows  users  to  send  encrypted  text  messages  and  make 
encrypted  calls. 

b.  At  9:23  a.m.,  Cohen  sent  an  email  that  stated  “call  me”  to  a  banker  at  First  Republic 
Bank  (“First  Republic  Employee-2”).  The  email  attached  documents  from  the  Secretary  of  State 
of  Delaware  indicating  that  Cohen  had  formed  a  limited  liability  company  called  “Resolution 
Consultants  EEC”  on  September  30, 2016.  As  noted  above,  “Resolution  Consultants”  is  the  name 
of  the  entity  that  Cohen  had  told  Howard  he  had  formed  recently  after  Howard  said  Davidson 
would  “do  it.”  At  10:44  a.m.,  Cohen  called  First  Republic  Employee-2  and  told  him,  in  sum  and 
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substance,  that  he  needed  an  account  in  the  name  of  “Resolution  Consultants”  opened  immediately, 
and  that  he  did  not  want  an  address  on  the  checks  written  out  of  the  account.  Later  that  day,  another 
employee  at  First  Republic  emailed  Cohen  account  opening  paperwork  to  complete.  Cohen 
returned  the  account  opening  documents  partially  completed,  but  failed  to  provide  a  copy  of  his 
driver’s  license  or  passport,  and  did  not  respond  to  the  employee’s  question  of  how  he  wanted  to 
fund  the  accoimt.  As  a  result,  the  account  was  never  opened. 

c.  On  October  1 7, 20 1 6,  Cohen  incorporated  Essential  Consultants  LLC  in  Delaware. 
That  same  day,  he  filed  paperwork  to  dissolve  Resolution  Consultants  LLC. 

20.  Despite  these  steps  taken  by  Cohen,  it  appears  that  the  negotiation  between  Cohen 
and  Davidson  was  not  progressing  sufficiently  fast  enough  for  Davidson  or  his  client,  Clifford, 
and  they  threatened  to  go  public  with  Clifford’s  allegations  just  days  before  the  presidential 
election.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the 
iCloud  Warrant,  and  public  sources,  I  loiow  the  following: 

a.  According  to  an  article  in  The  Washington  Post,  which  quoted  emails  sent  from 
Cohen’s  email  account  hosted  by  the  Trump  Organization,  on  October  17, 2016,  Davidson  emailed 
Cohen  and  threatened  to  cancel  the  aforementioned  “settlement  agreement”  by  the  end  of  the  day 
if  Cohen  did  not  complete  the  transaction.  According  to  the  article,  Davidson  sent  Cohen  a 
second  email  later  in  the  day  that  stated  in  part,  “Please  be  advised  that  my  client  deems  her 
settlement  agreement  canceled  and  void.”  At  4:00  p.m.  that  day,  Cohen  called  Davidson  and  they 
spoke  for  over  five  minutes. 


Due  to  the  partially  covert  nature  of  the  investigation  to  this  date,  the  Government  has  not 
requested  documents  from  the  Trump  Organization  or  Davidson,  and  thus  does  not  possess  the 
email  referenced  in  this  article. 
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b.  Cohen’s  4:00  p.m.  call  with  Davidson  and/or  Davidson’s  threats  to  cancel  the 
“settlement  agreement”  appear  to  have  touched  off  a  flurry  of  communications  about  the  settlement 
agreement  and  whether  Clifford  would  go  public.  Specifically: 

i.  At  4:43  p.m.,  Howard  sent  Cohen  a  text  message  that  stated:  “I’m  told 

they’re  going  with  DailyMail.  Are  you  aware?”  One  minute  later,  Cohen  responded:  “Call  me.” 
Based  on  my  involvement  in  this  investigation,  I  understand  Howard’s  text  to  mean  that  he  heard 
that  Clifford  was  going  to  take  her  story  of  an  extramarital  affair  with  Tmmp  to  the  Daily  Mail,  a 
tabloid  newspaper. 

ii.  At  4:45  p.m.,  Howard  called  Cohen  and  they  spoke  for  over  two  minutes. 
Moments  later,  Davidson  and  Cohen  spoke  for  about  two  minutes. 

iii.  At  5:03  p.m.,  Cohen  attempted  to  call  Trump,  but  the  call  only  lasted  eight 
seconds.  This  was  Cohen’s  first  call  after  he  spoke  with  Davidson. 

iv.  At  5:25  p.m.,  Cohen  texted  Howard,  stating:  “Well???” 

V.  At  6:44  p.m.,  Howard  responded  to  Cohen’s  text,  stating:  “Not  taking  my 

calls.”  Cohen  responded  one  minute  later:  “You’re  kidding.  Who  are  you  tr5dng  to  reach?” 
Howard  responded  one  minute  later:  “The  ‘agent.’”  Based  on  my  involvement  in  this 
investigation,  I  understand  Howard’s  text  messages  to  mean  that  he  attempted  to  contact  Davidson 
about  the  matter  involving  Clifford,  but  that  Davidson  was  not  taking  Howard’s  calls. 

vi.  At  6:49  p.m.,  Cohen  called  Howard  and  they  spoke  for  nearly  four  minutes. 

c.  The  following  day,  on  October  18,  2016,  TheSmoldngGun.com,  a  website  that 
publishes  legal  documents  and  mugshots,  published  an  article  called:  “Donald  Trump  and  the  Pom 
Superstar,”  which  alleged  that  Trump  had  an  extramarital  affair  with  Clifford.  However,  the 
article  noted  that  Clifford  had  declined  to  comment. 
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21.  On  or  about  October  25,  2016,  the  communications  between  Cohen,  Davidson, 
Howard  and  Pecker  picked  up  again,  apparently  concerning  a  transaction  involving  Clifford. 
Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen  Email 
Warrants  and  iCloud  Warrant,  as  well  as  my  review  of  public  sources,  I  have  learned  the  following: 

a.  On  October  25,  2016,  at  6:09  p.m.,  Howard  sent  Cohen  a  text  message  stating: 
“Keith  calling  you  urgently.  We  have  to  coordinate  something  on  the  matter  he’s  calling  you  about 
or  its  [sic]  could  look  awfully  bad  for  everyone.”  One  minute  later,  Davidson  sent  Cohen  a  text 
message  stating  “Call  me.”  Cohen  and  Davidson  called  each  other  several  times  over  the  next  half 
hour  but  appear  not  to  have  eonnected.  At  6:42  p.m.,  Cohen  and  Davidson  spoke  for  about  eight 
minutes.  At  7:1 1  p.m.,  they  spoke  for  another  two  minutes. 

b.  The  next  morning,  on  or  about  October  26, 2016,  at  8:26  a.m.,  Cohen  called  Trump 
and  spoke  to  him  for  approximately  three  minutes.  At  8:34  a.m.,  Cohen  called  Trump  again  and 
connected  for  a  minute  and  a  half. 

c.  At  approximately  9:04  a.m. — ^less  than  thirty  minutes  after  speaking  with  Trump — 
Cohen  sent  two  emails  to  the  person  who  had  incorporated  Resolution  Consultants  and  Essential 
Consultants  for  him,  and  stated  “can  you  send  me  asap  the  filing  receipt”  and  then,  in  the  second 
email,  “for  Essential  Consultants  EEC.”  That  person  responded  with  the  filing  receipt  two  minutes 
later  at  9:06  a.m.  and  with  the  certification  of  formation  23  minutes  later,  at  9:27  a.m. 

d.  Shortly  after  that,  Cohen  contacted  First  Republic  Employee-2  and  told  him,  in  sum 
and  substance,  that  he  decided  not  to  open  an  account  in  the  name  of  “Resolution  Consulting”  and 
instead  would  be  opening  a  real  estate  consulting  company  in  the  name  of  “Essential  Consultants.” 
Cohen  told  First  Republic  Employee-2  that  he  was  at  Trump  Tower,  and  wanted  to  go  to  a  First 
Republic  branch  across  the  street  to  open  the  account,  so  First  Republic  Employee-2  called,  a 


16 


Case  l:18-cr-00602-WHP  Document  48-6  Filed  07/18/19  Page  21  of  80 


preferred  banlcer  at  that  branch  (“First  Republic  Employee- 1”),  to  assist  Cohen.  At  11:00  a.m., 
First  Republic  Employee-1  called  Cohen.  I  know  from  my  participation  in  an  interview  with  First 
Republic  Employee-1 ,  that  around  the  time  of  the  call  he  went  to  Cohen’s  office  in  Trump  Tower — 
on  the  same  floor  as  the  Trump  Organization — and  went  through  account  opening  questions, 
including  know  your  customer  questions,  with  Cohen.  In  response  to  a  series  of  know-your- 
customer  questions  about  the  purpose  of  the  account — ^the  answers  to  which  First  Republic 
Employee- 1  entered  into  a  form — Cohen  stated,  in  sum  and  substance,  that  he  was  opening 
Essential  Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting 
work,  and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States. 
Based  on  my  review  of  records  obtained  from  First  Republic,  it  appears  that  this  account  (the 
“Essential  Consultants  Account”)  was  created  at  a  time  between  1 1 :00  a.m.  and  1 :00  p.m. 

e.  At  1:47  p.m.,  Cohen  called  Davidson  and  they  spoke  for  approximately  two 
minutes.  At  approximately  1 :49  p.m.,  Davidson  emailed  Cohen  wiring  instructions  for  an  attorney 
client  trust  account  at  City  National  Bank. 

f.  After  the  Essential  Consultants  Account  was  opened  on  October  26,  2016,  Cohen 
transferred  $131,000  from  a  home  equity  line  of  credit  that  Cohen  had  at  First  Repubhc  to  the 
Essential  Consultants  Account.  Following  the  transfer,  at  approximately  4:15  p.m.  on  October  26, 
2016,  First  Republic  Employee-2’s  assistant  emailed  Cohen  at  his  Trump  Organization  email 
address  to  tell  him  that  the  funds  had  been  deposited  into  the  Essential  Consultants  Account. 
Cohen  forwarded  that  email  to  the  Cohen  Gmail  Account  and  then  forwarded  it  to  Davidson. 

g.  At  6:37  p.m.,  Cohen  asked  Pecker  by  text  message,  “Can  we  speak?  Important.” 
Cohen  called  Pecker  at  6:49  p.m.  and  connected  for  thirty  seconds.  At  6:57  p.m.,  Cohen  sent 
Howard  a  text  message,  stating:  “Please  call  me.  Important.”  Cohen  called  Howard  at  7:00  p.m. 
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and  connected  for  about  thirty  seconds.  At  7:06  p.m.,  Cohen  called  Pecker jagain  and  they  spoke 
for  nearly  thirteen  minutes.  At  7:24  p.m.,  Howard  sent  a  text  message  to  Cohen  that:  “He  said 
he’d  call  me  back  in  20  minutes.  I  told  him  what  you  are  asldng  for  his  [sic]  reasonable.  I’ll  get 
it  sorted.”  Approximately  an  hour  later,  at  8:23  p.m.,  Howard  told  Cohen  by  text  message  to 
“check  your  Gmad  for  email  from  my  private  accoimt.”  In  an  email  sent  at  8:23  p.m.  by  Howard 
to  Cohen  and  Davidson,  with  the  subject  line  “Confirmation,”  Howard  stated,  “Thank  you  both 
for  chatting  with  me  earlier.  Confirming  agreement  on:  -  Executed  agreement,  hand-signed  by 
Keith’s  chent  and  returned  via  overnight  or  same-day  FedEx  to  Michael,  -  Change  of  agreement 
to  reflect  the  correct  EEC,  -  Transfer  of  funds  on  Thursday  AM  to  be  held  in  escrow  until  receipt 
of  agreement.”  After  receiving  that  email,  at  approximately  8:27  p.m.,  Cohen  asked  Howard  by 
text  message,  “Can  you  and  David  [Pecker]  give  me  a  call.”  Howard  promptly  responded:  “David 
is  not  around  I  think.  I’ll  call.”  At  8:28  p.m.,  Howard  called  Cohen  and  they  spoke  for  three 
minutes. 

22.  On  October  27,  2016,  Cohen  made  a  payment  to  Davidson  of  $130,000 — with  the 
funds  intended  for  Clifford — for  the  purpose  of  securing  her  ongoing  silence  with  respect  to  the 
allegations  that  she  had  an  extramarital  affair  with  Trump.  Specifically,  based  on  my  review  of 
toll  records,  bank  records,  and  information  obtauied  pursuant  to  the  iCloud  Warrant  and  Cohen 
Email  Warrants,  I  have  learned  the  following: 

a.  At  9:47  a.m.,  Cohen  sent  Davidson  an  email,  stating:  “Keith,  kindly  confirm  that 
the  wire  received  today,  October  27,  2016  shall  be  held  by  you  in  your  attorney’s  trust  accoimt 
imtil  such  time  as  directed  for  release  by  me,  in  writing.  Additionally,  please  ensure  that  all 
paperwork  contains  the  correct  name  of  Essential  Consultants  EEC.  I  thank  you  in  advance  for 
your  assistance  and  look  forward  to  hearing  from  you  later.” 
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b.  At  approximately  10:01  a.m.,  according  to  records  provided  by  First  Republic 
Bank,  Cohen  completed  paperwork  to  wire  $130,000  from  the  Essential  Consultants  Account — 
which  had  been  fimded  a  day  prior  from  Cohen’s  home  equity  line  of  credit — ^to  the  attorney  client 
trust  account  at  City  National  Bank  that  Davidson  had  specified  in  the  wiring  instructions  he  sent 
to  Cohen.  The  wire  transfer  was  made  shortly  thereafter. 

c.  At  10:02  a.m.,  Davidson  responded  to  Cohen’s  email  from  9:47  a.m.,  stating:  “I 
confirm  that  I  will  work  in  good  faith  &  that  no  funds  shall  be  disbursed  unless  &  until  the  plaintiff 
personally  signs  all  necessary  settlement  paperwork,  (the  form  of  which  will  match  the  prior 
agreement).  The  settlement  docs  will  name  the  correct  corporation,  (Essential  Consultants  LLC). 
Plaintiffs  signature  will  be  notarized  and  returned  to  you  via  FedEx.  Only  after  you  receive  FedEx 
will  I  disburse.  Fair?” 

d.  At  10:50  a.m..  First  Republic  Employee-1  sent  Cohen  an  email  confirming  that  the 
payment  had  been  sent  and  providing  him  with  the  wire  number. 

23.  On  October  28,  2016,  and  the  days  that  followed,  Cohen  finalized  the  transaction 
with  Davidson.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant 
to  the  iCloud  Warrant,  public  sources,  and  bank  records,  I  know  the  following: 

a.  On  October  28, 20 1 6,  at  1 1 :48  a.m.,  Cohen  spoke  to  Trump  for  approximately  five 
minutes.  Beginning  at  1:21  p.m.,  Cohen  attempted  a  series  of  phone  calls  to  Davidson,  Pecker, 
and  Howard  throughout  the  day,  although  it  appears  he  may  only  have  connected  with  Howard. 

b.  Later  that  day,  at  approximately  7:01  p.m.,  Davidson  stated  to  Cohen  by  text 
message  that  “all  is  AOK.  I  should  have  signed,  notarized  docs  on  Monday.  You  should  have 
them  on  Tuesday.”  Cohen  thanked  him  and  said  “I  hope  we  are  good.”  Davidson  responded,  “I 
assure  you.  We  are  very  good.”  Howard  also  texted  Cohen  at  7:08  p.m.,  “Keith  [Davidson]  says 
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we  are  good.”  Cohen  then  responded  “OK”  to  Howard  and  “Excellent”  to  Davidson.  At  [ 

approximately  10:30  p.m.,  Cohen  spoke  to  Hicks  for  three  minutes.  j 

c.  On  October  31,  2016,  Cohen  called  Howard  at  8:22  p.m.  and  they  spoke  for  over 
three  minutes.  At  8:32  p.m.,  Cohen  received  text  messages  from  both  Howard  and  Davidson. 

Howard  said:  “You’ll  have  paperwork  tomorrow  says  KD.”  Davidson  said:  “We  are  AOK.  You 
will  be  receiving  a  package  tomorrow.”  Cohen  responded  “Thank  you”  to  Howard  and  “Thanks 

Keith.  Will  call  you  then”  to  Davidson.  From  my  involvement  in  this  investigation,  I  believe 

.  ^  ^ 

Davidson  was  referring  to  a  signed  nondisclosure  agreement  when  he  told  Cohen  that  he  would  j 

receive  a  package.  i 

d.  Based  on  my  review  of  court  filings  that  became  public  in  2018, 1  have  learned  that 
on  or  about  October  28,  2016,  “EC,  LLC  and/or  David  Dennison”  entered  into  a  “confidential 

1 

settlement  agreement  and  mutual  release”  with  “Peggy  Peterson,”  pursuant  to  which  ‘Teterson” 
agreed  not  to  disclose  certain  “confidential  information  pertaining  to  [Dennison]”  in  exchange  for 
$130,000.  The  agreement  provided  that  “EC,  LLC”  would  wire  the  funds  to  “Peterson’s”  attorney, 
who  would  then  transfer  funds  to  “Peterson.”  Cohen  signed  the  agreement  on  behalf  of  “EC, 

LLC.”  The  agreement  stated  that  the  address  for  “EC,  LLC,”  which  was  later  referred  to  in  the  f 

agreement  as  “Essential  Consultants,  LLC,”  was  Cohen’s  residence. 

e.  Consistent  with  the  “confidential  settlement  agreement  and  mutual  release,”  on  or 

about  November  1,  2016,  Davidson  transferred  $96,645  from  his  attorney  client  trust  account  at 
City  National  Bank  to  a  bank  account  in  Clifford’s  name.  The  wire  had  the  annotation  “net 
settlement.”  On  the  same  day,  at  approximately  9:48  a.m.  Davidson  sent  Cohen  a  text  message  j 

with  a  picture  of  a  FedEx  delivery  confirmation,  stating  that  at  approximately  9:09  a.m.  a  package  ! 

shipped  by  Davidson  the  previous  day  had  arrived  for  Cohen  at  his  Trump  Organization  | 
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address.  On  the  same  day,  at  approximately  6:14  p.m.,  Davidson  sent  Cohen  an  email  with  an 
audio  file  attached  and  said  “Give  this  a  lesson  [sic]  and  then  call  me.”  The  audio  attachment  was 
titled  “Stormy .mp3”  and  was  a  five-minute  recording  of  Davidson  interviewing  Clifford  about 
recent  public  allegations  made  by  an  adult  film  star  named  Jessica  Drake  regarding  her  alleged 
past  affair  with  Trump;  in  the  recording,  Clifford  explained  the  reasons  she  believed  that  Drake 
was  not  credible.  Less  than  an  hour  later,  at  approximately  7:05  p.m.,  Cohen  called  Trump,  but  it 
appears  that  they  did  not  connect.  Cohen  then  called  a  telephone  number  belonging  to  Kellyanne 
Conway,  who  at  the  time  was  Trump’s  campaign  manager.  They  did  not  connect.  At 
approximately  7:44  p.m.,  however,  Cohen  received  a  return  call  from  Conway,  which  lasted  for 
approximately  six  minutes. 

24.  On  November  4, 20 1 6,  just  three  days  after  the  Clifford  transaction  was  completed 
and  just  four  days  before  the  presidential  election,  the  Wall  Street  Journal  published  an  article 
alleging  that  the  National  Enquirer  had  “Shielded  Donald  Trump”  from  allegations  by  Playboy 
model  Karen  McDougal  that  she  and  Tmmp  had  an  affair.  The  article  alleged  that  AMI  had  agreed 
to  pay  McDougal  to  bury  her  story.  McDougal,  like  Clifford,  had  been  represented  by  Davidson. 
Based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen  Email  Warrants 
and  iCloud  Warrant,  and  public  sources,  it  appears  that  Cohen  spoke  frequently  to  Davidson, 
Howard,  Pecker,  and  Hicks  around  the  time  of  this  article’s  publication — just  days  before  Election 
Day — ^about  the  importance  of  preventing  the  McDougal  and  Clifford  stories  from  gaining  national 
traction.  Specifically,  I  have  learned  the  following: 

a.  Between  4:30  and  8:00  p.m.  on  November  4,  Cohen  communicated  several  times 
with  Howard,  Pecker  and  Davidson.  For  instance,  at  approximately  4:49  p.m.,  Cohen  sent  Howard 
a  text  message  with  a  screenshot  of  an  email  forwarded  to  him  by  another  Trump  Organization 


21 


Case  l:18-cr-00602-WHP  Document  48-6  Filed  07/18/19  Page  26  of  80 


lawyer.  The  forwarded  email  was  from  a  Wall  Street  Journal  reporter,  and  asked  for  comment 
from  Trump  and/or  the  campaign  on  the  story.  Cohen  also  spoke  with  Hicks  several  times, 
including  shortly  before  and/or  after  calls  with  Pecker,  Howard  and  Davidson.  Indeed,  at 
approximately  7:33  p.m.,  using  two  different  cellphones  subscribed  to  him,  Cohen  appears  to  have 
been  talking  to  Davidson  and  Hicks  at  the  same  time. 

b.  At  approximately  8:51  p.m.,  Cohen  sent  Howard  a  message,  stating:  “She’s  being 
really  difficult  with  giving  Keith  a  statement.  Basically  went  into  hiding  and  unreachable.”  One 
minute  later,  Howard  responded:  “I’ll  ask  him  again.  We  just  need  her  to  disappear.”  Cohen 
responded,  “She  definitely  disappeared  but  refuses  to  give  a  statement  and  Keith  cannot  push  her.” 
At  approximately  8:55  p.m.,  Howard  responded  to  Cohen’s  text:  “Let’s  let  the  dust  settle.  We  don’t 
want  to  push  her  over  the  edge.  She’s  on  side  at  present  and  we  have  a  solid  position  and  aplausible 
position  that  she  is  rightfully  employed  as  a  columnist.”  Based  on  my  involvement  in  this 
investigation,  I  believe  Cohen  and  Howard  were  referring  to  Karen  McDougal  when  they  were 
discussing  “she”  and  “her.”  Additionally,  I  believe  Howard’s  statement  that  “we  have  ...  a 
plausible  position  that  she  is  rightfully  employed  as  a  colunmist”  was  a  reference  to  the  fact  that 
AMI  had  given  McDougal  payments  for  her  role  as  a  purported  columnist  for  the  company. 

c.  At  approximately  8:58  p.m.  on  November  4,  2016,  Howard  attempted  to  reassure 
Cohen  about  the  effect  of  the  forthcoming  Wall  Street  Journal  article,  texting,  “I  think  it’ll  be  ok 
pal.  I  think  it’ll  fade  into  the  distance.”  Cohen  responded,  “He’s  pissed.”  Howard  wrote  back, 
“I’m  pissed!  You’re  pissed.  Pecker  is  pissed.  Keith  is  pissed.  Not  much  we  can  do.”  Based  on 
my  involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  Trump  when  he  stated  “he’s 
pissed.”  Cohen  asked  Howard  at  approximately  9:00  p.m.  how  the  Wall  Street  Journal  could 
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publish  its  article  if  “everyone  denies.”  Howard  responded,  “Because  there  is  the  payment  from 
AMI.  It  looks  suspicious  at  best.” 

d.  At  approximately  9:03  p.m.,  Hicks  called  Cohen  and  they  spoke  for  two  minutes. 
At  approximately  9:11  p.m.,  Cohen  called  Howard  and  spoke  to  him  for  five  minutes.  At 
approximately  9:15  p.m.,  Hicks  called  Cohen  and  they  spoke  for  nearly  seven  minutes.  Again, 
Cohen  used  different  phones  for  these  two  calls,  such  that  he  appears  to  have  been  on  both  calls 
for  about  a  minute  of  overlap.  At  approximately  9:32  p.m.,  Cohen  texted  Pecker,  “The  boss  just 
tried  calling  you.  Are  you  free?”  A  minute  later,  Cohen  texted  Howard,  “Is  there  a  way  to  find 
David  quickly?” 

e.  At  approximately  9:50  p.m.,  the  Wall  Street  Journal  article  was  published  online. 
Howard  and  Hicks  both  sent  web  links  for  the  article  to  Cohen.  Over  the  next  half  hour,  Cohen 
and  Howard  exchanged  several  text  messages  commenting  on  how  the  story  came  across.  The  next 
morning  onNovember  5, 2016,  at  approximately  7:35  a.m.,  Cohen  texted  Hicks,  “So  far  I  see  only 
6  stories.  Getting  little  to  no  traction.”  Hides  responded,  “Same.  Keep  praying!!  It’s  working!” 
Cohen  wrote  back,  “Even  CNN  not  talking  about  it.  No  one  believes  it  and  if  necessary,  I  have  a 
statement  by  Storm  denying  everything  and  contradicting  the  other  pom  stars  statement.  I  wouldn’t 
use  it  now  or  even  discuss  with  him  as  no  one  is  talking  about  this  or  cares!”  Based  on  my 
involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  the  above-referenced  recorded 
audio  statement  by  Clifford  that  he  obtained  from  Davidson,  and  was  stating  that  such  a  statement 
could  be  used  to  influence  potential  negative  media  relating  to  Trump,  but  was  unnecessary  at  that 
time.  Based  on  a  text  message  from  Hicks  to  Cohen,  I  believe  that  later  that  morning.  Pecker 
spoke  to  Trump. 
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25.  On  or  about  November  8, 2016,  Trump  won  the  election  for  President  of  the  United 

States. 

26.  On  or  about  January  12,  2018,  the  Wall  Street  Journal  first  reported  that  Cohen 
arranged  a  payment  to  Clifford.  On  or  about  January  22,  2018,  Common  Cause,  a  government 
watchdog  group,  filed  a  complaint  with  the  Federal  Election  Commission,  alleging  that  Cohen  had 
violated  campaign  finance  laws  by  making  the  payment  to  Clifford.  Based  on  my  review  public 
sources  following  that  report,  as  well  as  emails  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 


have  learned  the  following: 

a.  On  or  about  January  23,  2018,  the  day  after  Common  Cause  filed  its  complaint, 

Cohen  began  emailing  himself  drafts  of  statements  describing  his  payment  to  Clifford. 

Additionally,  on  January  23,  2018,  Cohen  emailed  the  following  draft  of  that  statement  to  an 

individual  who  appears  to  be  writing  a  book  on  Cohen’s  behalf: 

In  October  2016, 1  was  contacted  by  counsel  for  Ms.  Clifford  stating  that 
news  outlets,  including  ABC  news,  were  pursuing  the  2011  story  of  an 
alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.  Despite  the  fact  that 
both  parties  had  already  denied  the  allegation,  as  Mr.  Trump’s  longtime 
special  counsel  and  protector,  I  took  it  upon  myself  to  match  the  offer  and 
keep  the  story  from  brealdng.  I  loiew  the  allegation  to  be  false,  but  I  am 
also  a  realist  who  understands  that  just  because  something  is  false  doesn  ’t 
mean  that  it  doesn ’t  create  harm  and  damage.  I  could  not  allow  this  to 
occur.  I  negotiated  a  non-disclosure  agreement  with  Ms.  Chfford’s 
counsel  and  tendered  the  funds.  I  did  this  through  my  Delaware  LLC  and 
transferred  personal  funds  to  cover  the  agreement.  I  was  not  reimbursed 
any  monies  from  Mr.  Trump,  the  Trump  Organization,  any  third  party  or 
the  Presidential  campaign.  At  no  point  did  I  ever  advise  Mr.  Trump  of  my 
communications  or  actions  regarding  this  agreement.  As  outlandish  and 
unusual  as  this  may  appear,  the  Trumps  have  been  like  family  to  me  for 
over  a  decade.  It’s  what  you  do  for  family. 

(Emphasis  added.)  Based  on  my  involvement  in  this  investigation,  I  believe  that  the  above  email 
is  an  acknowledgement  that  the  allegation  of  the  affair  had  existed  for  some  time  ("\..the  2011 
story. . .”),  but  that  Cohen  was  motivated  to  “keep  the  story  from  breaking”  again  in  October  201 6. 
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b.  On  or  about  February  13,  2018,  Cohen  said  in  a  statement  to  The  New  York  Times  f 

k 

that  “Neither  the  Trump  Organization  nor  the  Trump  campaign  was  a  party  to  the  transaction  with  1: 

Ms.  Clifford.  The  payment  to  Ms.  Clifford  was  lawful,  and  was  not  a  campaign  contribution  or  a  ' 

campaign  expenditure  by  anyone.”  Cohen  declined  to  answer  follow-up  questions  including  r 

whether  Trump  had  been  aware  of  the  payment,  why  Cohen  made  the  payment,  or  whether  similar  f 

payments  had  been  made  to  other  people. 

c.  On  or  about  February  14,  2018,  Cohen  was  asked  by  The  New  York  Times  whether 

Trump  had  reimbursed  bim,  whether  he  and  Trump  had  made  any  arrangement  at  the  time  of  the  » 

I 

,  .  f 

payment,  or  whether  he  had  made  payments  to  other  women.  Cohen  stated  m  response,  “I  can’t  I 

get  mto  any  of  that.”  On  or  about  February  14,  2018,  Cohen  also  stated  to  The  Washington  Post 
that:  “In  a  private  transaction  in  2016,  I  used  my  own  personal  funds  to  facilitate  a  payment  of 

I 

$130,000  to  Ms.  Stephanie  Clifford.  Neither  the  Trump  Organization  nor  the  Trump  campaign  ' 

was  a  party  to  the  transaction  with  Ms.  Clifford,  and  neither  reimhursed  me  for  the  payment,  either  | 

directly  or  mdirectiy.” 

d.  On  or  about  March  9,  201 8,  Cohen  stated  to  ABC  News  that  “the  funds  were  taken 

from  my  home  equity  line  and  transferred  internally  to  my  LLC  account  in  the  same  bank.”  : 

27.  Accordingly,  for  the  foregoing  reasons,  there  is  probable  cause  to  believe  that  ! 

Cohen  committed  violations  of  the  Subject  Offense  by  making  an  in-kind  contribution  to  Trump 
or  the  Trump  campaign  in  the  form  of  a  $130,000  payment  to  Clifford  on  the  eve  of  the  election. 

Indeed,  while  he  denies  having  given  an  unlawful  contribution,  in  bis  own  statements  Cohen  has  i 

admitted  that  he  paid  $1 30,000  of  his  “personal  funds”  to  Clifford  and  that  the  payment  occurred  ! 

less  than  two  weeks  before  the  election,  as  Trump  was  facing  negative  media  allegations  about  5 

f 

his  behavior  toward  women,  even  though  allegations  of  an  affair  between  Trump  and  Clifford  t 
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existed  since  2011.  In  addition,  the  communication  records  set  forth  above  make  evident  that 
Cohen  communicated  with  members  of  the  Trump  campaign  about  his  negotiation  with 
Clifford’s  attorney  and  the  need  to  preclude  Clifford  from  making  a  statement  that  would  have 
reflected  negatively  on  the  candidate  in  advance  of  the  forthcoming  election. 

28.  Therefore,  there  is  probable  cause  to  believe  that  a  search  of  the  Subject  Devices 
will  reveal  evidence,  fruit  and  instrumentalities  of  the  Subject  Offenses,  including  the  following: 

a.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or 
their  agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related 
documents,  and  any  communications  related  to  such  agreements. 

b.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump 
and/or  agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal, 
or  payments  to  Stephanie  Clifford  or  Karen  McDougal. 

c.  Evidence  of  communications  with  American  Media,  Inc.,  David  Pecker, 
and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie  Clifford,  and/or 
Karen  McDougal. 

d.  Evidence  relating  to  Cohen’s  role  in  the  Tmmp  Campaign,  and  coordination 
or  consultation  with  the  Trump  Campaign. 

e.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or 
associates  of  the  Trump  Campaign  about  the  Access  Hollywood  tape. 

f.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws, 
campaign  contribution  reporting  requirements,  and  campaign  contribution  limits. 
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g.  Evidence  indicating  Michael  Cohen’s  intent  with  respect  to  the  Subject 
Offense,  including  whether  the  payment  to  Clifford  and  any  similar  payments  were  made  to 
influence  the  Presidential  election. 

in.  Procedures  for  Searching  ESI 
A.  Review  of  ESI 

29.  Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and 
agents,  and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and  related 
proceedings,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  interpreters,  and  outside  vendors  or  technical  experts  under 
government  control)  will  review  the  ESI  contained  on  the  Subject  Devices  for  information 
responsive  to  the  warrant. 

30.  In  conducting  this  review,  law  enforcement  personnel  may  use  various  methods  to 
locate  evidence,  fruits,  and  instramentalities  of  the  Subject  Offense,  including  but  not  lunited  to 
undertakmg  a  cursory  inspection  of  all  emails,  texts  or  files  contained  on  the  Subject  Devices.  This 
method  is  analogous  to  cursorily  mspecting  all  the  files  in  a  file  cabinet  in  an  office  to  determine 
which  paper  evidence  is  subject  to  seizure.  Although  law  enforcement  personnel  may  use  other 
methods  as  well,  particularly  including  ke3word  searches,  I  know  that  ke5word  searches  and 
similar  methods  are  typically  inadequate  to  detect  all  information  subject  to  seizure.  As  an  initial 
matter,  keyword  searches  work  only  for  text  data,  yet  many  types  of  files  commonly  associated 
with  emails,  including  attachments  such  as  scanned  documents,  pictures,  and  videos,  do  not  store 
data  as  searchable  text.  Moreover,  even  as  to  text  data,,  keyword  searches  cannot  be  relied  upon 
to  capture  all  relevant  communications  in  an  account,  as  it  is  impossible  to  know  in  advance  all  of 
the  unique  words  or  phrases  that  investigative  subjects  will  use  in  their  communications,  and 
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consequently  there  are  often  many  communications  in  an  accoimt  that  are  relevant  to  an 
investigation  hut  that  do  not  contain  any  keywords  that  an  agent  is  likely  to  search  for. 

IV.  Conclusion  and  Ancillary  Provisions 

3 1 .  Based  on  the  foregoing,  I  respectfully  request  the  court  to  issue  a  warrant  to  seize 
the  items  and  information  specified  in  Attachment  A  to  this  affidavit  and  to  the  Search  and  Seizure 
Warrant. 

32.  In  light  of  the  confidential  nature  of  the  continuing  investigation,  and  for  the 
reasons  more  fully  set  forth  in  the  Accompanying  Affidavit,  I  respectfully  request  that  this  affidavit 
and  all  papers  submitted  herewith  be  maintained  under  seal  until  the  Court  orders  otherwise. 


Special  Agent,  USAO 


Sworn  to  before  me  on 


7th  day  of  April,  201,8  i  1 1 1 , 


HON.  HEivTIlY-B.  PliAlito  v  ,  ;  ^ 
UNTTEDiSTAfESI^  JUDGE 
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Attachment  A 

I.  Devices  to  be  Searched 

The  devices  to  be  searched  (the  “Subject  Devices”)  are  described  as: 

a.  Subject  Device- 1 :  A  black  and  red  USB  drive  with  a  white  label  that  says  “Tracking 
#:  180208140208.” 

b.  Subject  Device-2:  A  silver  DVD  with  a  white  label  that  reads  “Cohen  — 
2018.03.07.” 

c.  Subject  Device-3:  A  white  DVD  labelled  “2-28-18  Cohen  SW  Returns  —  Google 

andl&l.” . . . . . .  -  - 


n.  Review  of  ESI  on  the  Subject  Devices 

Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and  agents, 
and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and  related  proceedings, 
attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the  government  in 
this  investigation,  interpreters,  and  outside  vendors  or  technical  experts  under  government  control) 
are  authorized  to  review  the  ESI  contained  on  the  Subject  Devices  for  evidence,  fruits,  and 
instrumentalities  of  one  or  more  violations  of  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l) 
(illegal  campaign  contributions)  (the  “Subject  Offense”),  as  listed  below: 

a.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related 
documents,  and  any  communications  related  to  such  agreements. 

b.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen 
McDougal,  or  payments  to  Stephanie  Clifford  or  Karen  McDougal. 

c.  Evidence  of  communications  with  American  Media,  Inc.,  David  Pecker,  and/or 
Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie  Clifford, 
and/or  Karen  McDougal. 

d.  Evidence  relating  to  Cohen’s  role  m  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 
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e.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape, 
f  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits, 
g.  Evidence  indicating  Michael  Cohen’s  intent  with  respect  to  the  Subject  Offense, 
including  whether  the  payment  to  Clifford  and  any  similar  payments  were  made  to 
influence  the  Presidential  election. 
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Exhibit  A 
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I 

f 


AO  93  (Rev,  1 1/13)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

District  of  Columbia 


M.  zi  m 


In  the  Matter  of  the  Search  of 
(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

INFORMATION  ASSOCIATED  WITH  THE  EMAIL 
ACCOUNT^^^^^HmGMAILCOM 


Signed 


SEARCH  AND  SEIZURE  WARRANT 


JTo: - An3cauthorized-law-enfbrcement-of£icer- - . . - 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 
of  the  following  person  or  property  located  in  the  Northern  District  of  _ California 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location)^ 


I 


See  Attachment  A. 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or  property 
described  above,  and  that  such  search  will  reveal  (identify  the  person  or  describe  the  property  to  be  seized)^ 

See  Attachment  B, 


YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before  August  1,2017  (not  to  exceed  14  days) 

^  in  the  daytime  6:00  a.m.  to  10:00  p.m.  □  at  any  time  in  the  day  or  night  because  good  cause  has  been  established. 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  propeity  taken  to  the 
person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the  place  where  the 
property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an  inventory 
as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  .  Hon,  Beryl  A,  Howell  ,  ,  . 

(United  States  Magistrate  Judge) 

□  Pursuant  to  1 8  U.S.C.  §  3 1 03a(b),  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  1 8  U.S.C* 

§  2705  (except  for  delay  of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose 
propeily,  will  be  searched  or  seized  (check  the  appropriate  box) 

□  for _ days  f>7o^  to  exceed 30)  □  until,  the  facts  justifying,  the  later  specific  date  of  _ , _ _ , 

Date  and  time  issued:  f  ^ 

^  Judge ’s  signature 

City  and  state:  VVashington,  DC  Hon.  Beryl  A.  Howell,  Chief  U.S.  District  Judge 

^  Printed  name  and  title 
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AO  93  (Rev  1 1/13)  Search  and  Seizure  Warranl  (Page  2) 


Return 


Case  No.: 

i7-r.c^ 


Date  and  tinp  warrant  executed: 

yjih/'zon 


Inventory  made  in  the  presence  of: 


Copy  of  warrant  and  inventory  left  with: 

G-ao ^ 


Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 


I  l^06:>6^  -ZO 17071^-  j 

V/CC/--A  Prod^-^^-  F,4r 


FILE© 

JUL  2 1  2017 

Mfilcruptcy  Courts 


Certifies  ttou 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant  to  the 
designated  judge. 


Dale: 


I-' rf filed  name  and  fftfe 
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ATTACHMENT  A 


This  warrant  applies  to  information  associated  with  the  Google  Mail  Account 
l@gmail.com  that  is  stored  at  premises  owned,  maintained,  controlled,  or  operated  by 
Google,  a  company  headquartered  at  1 600  Amphitheatre  Parkway,  Mountain  View,  CA  94043. 
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ATTACHMENT  B 


L  Information  to  be  disclosed  by  Google 

To  the  extent  that  the  information  described  in  Attachment  A  is  within  the  possession, 
custody,  or  control  of  the  Google  (hereinafter  “the  Provider”),  regardless  of  whether  such 
information  is  stored,  held  or  maintained  inside  or  outside  of  the  United  States,  and  including  any 
emails,  records,  files,  logs,  or  information  that  have  been  deleted  but  are  still  available  to  the 
Provider,  the  Provider  is  required  to  disclose  the  following  information  to  the  government  for  each 
account  or  identifier  listed  in  Attachment  A: 

a.  The  contents  of  all  emails  associated  with  the  account,  including  stored  or  preserved 
copies  of  emails  sent  to  and  from  the  account,  draft  emails,  the  source  and 
destination  addresses  associated  with  each  email,  the  date  and  time  at  which  each 
email  was  sent,  and  the  size  and  length  of  each  email; 

b.  All  records  or  other  information  regarding  the  identification  of  the  account,  to 
include  full  name,  physical  address,  telephone  numbers  and  other  identifiers, 
records  of  session  times  and  durations,  the  date  on  which  the  account  was  created, 
the  length  of  service,  the  IP  address  used  to  register  the  account,  log-in  IP  addresses 
associated  with  session  times  and  dates,  account  status,  alternative  email  addresses 
provided  during  registration,  methods  of  connecting,  log  files,  and  means  and 
source  of  payment  (including  any  credit  or  bank  account  number); 

c.  The  types  of  service  utilized; 

d.  All  records  or  other  information  stored  at  any  time  by  an  individual  using  the 
account,  including  address  books,  contact  and  buddy  lists,  calendar  data,  pictures, 
and  files; 

e.  All  records  pertaining  to  communications  between  the  Provider  and  any  person 
regarding  the  account,  including  contacts  with  support  services  and  records  of 
actions  taken;  and  other  identifiers,  records  of  session  times  and  durations,  the  date 
on  which  the  account  was  created,  the  length  of  service,  the  types  of  service  utilized, 
the  IP  address  used  to  register  the  account,  log-in  IP  addresses  associated  with 
■session  times  and  dates,  account  status,  alternative  e-mail  addresses  provided 
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during  registration,  all  other  user  names  associated  with  the  account,  ail  account 
names  associated  with  the  subscriber,  methods  of  connecting; 

f.  All  search  history  or  web  history; 

g.  All  records  indicating  the  services  available  to  subscribers  of  the  accounts; 

h.  All  usernames  associated  with  or  sharing  a  login  IP  address  or  browser  cookie  with 
the  accounts; 

i.  All  cookies,  including  third-party  cookies,  associated  with  the  user; 

j.  All  records  that  are  associated  with  the  machine  cookies  associated  with  the  user; 

and . . . . . 

k.  All  telephone  or  instrument  numbers  associated  with  the  Account  (including  MAC 
addresses,  Electronic  Serial  Numbers  (“ESN”),  Mobile  Electronic  Identity 
Numbers  (“MEIN”),  Mobile  Equipment  Identifier  (“MEID”),  Mobile  Identification 
Numbers  (“MIN”),  Subscriber  Identity  Modules  (“SIM”),  Mobile  Subscriber 
Integrated  Services  Digital  Network  Number  (“MSISDN”),  International  Mobile 
Subscriber  Identifiers  (“IMSI”),  or  International  Mobile  Equipment  Identities 
(“IMEI”). 

II.  Information  to  be  Seized  by  the  Government 

All  infoimation  described  above  in  Section  I  that  constitutes  evidence,  contraband,  fruits, 
and/or  instrumentalities  of  violations  of  18  U.S.C.  §  1014  (false  statements  to  a  financial 
institution)  and  18  U.S.C.  §  1956  (money  laundering),  as  well  as  18  U.S.C.  §  951  (acting  as  an 
unregistered  foreign  agent)  and  the  Foreign  Agents  Registration  Act  (“FARA”),  22  U.S.C.  §  61 1 
etseq.,  involving  Michael  Dean  Cohen  and  occurring  on  or  after  January  1,  2016,  including,  for 
each  account  or  identifier  listed  on  Attachment  A,  information  pertaining  to  the  following  matters; 

a.  Communications,  records,  documents,  and  other  files  involving  Essential 
Consultants,  EEC; 

b.  Communications,  records,  documents,  and  other  files  involving  Bo  and  Abe  Realty, 
EEC; 

c.  Communications,  records,  documents,  and  other  files  that  false  representations  to  a 
financial  institution  with  relation  to  intended  the  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an 
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I 

1^ 

account  a  financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the 
purpose  or  nature  of  any  financial  transactions  involving  that  financial  institution; 

d.  Records  of  any  funds  or  benefits  received  by  or  offered  to  Michael  Dean  Cohen  by, 
or  on  behalf  of,  any  foreign  government,  foreign  officials,  foreign  entities,  foreign 
persons,  or  foreign  principals; 

e.  Communications,  records,  documents,  and  other  files  that  reveal  efforts  by  Michael 
Dean  Cohen  to  conduct  activities  on  behalf  of,  for  the  benefit  of,  or  at  the  direction 
of  any  foreign  government,  foreign  officials,  foreign  entities,  foreign  persons,  or 

_ _  foreign  principals;  . . . . 

f.  Evidence  indicating  how  and  when  the  account  was  accessed  or  used,  to  determine 
the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating 
to  the  crimes  under  investigation  and  to  the  account  owner; 

g.  Evidence  indicating  the  account  owner’s- state  of  mind  as  it  relates  to  the  crimes 
under  investigation; 

h.  The  identity  of  the  person(s)  who  created  or  used  the  account,  including  records 
that  help  reveal  the  whereabouts  of  such  person(s);  and 

i.  The  identity  of  any  person(s) — including  records  that  help  reveal  the  whereabouts 
of  the  person(s) — ^who  communicated  with  the  account  about  any  matters  relating 
to  activities  conducted  by  Michael  Dean  Cohen  on  behalf  of,  for  the  benefit  of,  or 
at  the  direction  of  any  foreign  government,  foreign  officials,  foreign  entities, 
foreign  persons,  or  foreign  principals. 
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Exhibit  B 


Case  l:18-cr-00602-WHP  Document  48-6  Filed  07/18/19  Page  43  of  80 

AO  93  (Rev.  11/13)  Search  and  Seizure  Warrant 


United  States  District  Court  f 

for  tlie  j 

District  of  Columbia  j 

)  '  •  i 

)  Case:  1:1 7-mj-00855  j 

)  Assigned  To  :  Chief  Judge  Howell,  Beryl  A.  I 

)  Assign.  Date  :  11/13/2017 

^  Description:  Search  and  Seizure  Warrant 

SEARCH  AND  SEIZURE  WARRANT  ^  . .  ~  . . ‘  j 

— —Any-authorizedTaw-eeforeemenf  officer-- — - - - - — — - - — — - — ■■■■'  —  j 

I 

An  application  by  a  federal  law  ehforcenient  officer  or  ah  attorney  for  the  government  requests  the  search  | 

of  the  following  person  or  property  located  in  the  Northern  District  of  California 

(identify  the  person  or  describe  the  propertyi  to  be  searched  and  give  its  location)'* 

See  Attachment  A, 


I  find  that  the  affidavitCs),  or  any  recorded  testimony^  establish  probable  cause  to  s.eai-ch  and  seize  the  person  or  propeify 
described  above,  and  that  such  search  will  reveal  (identijy  the  person  or  descrihe  the property  to  be  seized)'. 

See  Attachment  B. 


In  the  Matter  of  the  Seai^ch  of 

(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

INFORMATION  ASSOCIATED  WITH  THE  EMAIL 
ACCOUNT  ^^^^^I^GMAILGOM 


YOU  ARE  COMMANDED  to  execute  this  waaant  on  or  before  November  20,  2017  (not  to  exceed  14  days) 
^  ill  the  daytime  6:00  a.m,  to  10:00  p.m.  □  at  any  time  in  the  day  or  night  because  good  cause  has  b.een  established. 


Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  waiTant  and  a  receipt  for  the  property  taken  to  the 
person  from  whom^,  or  from  whose  premises,  the  property  was  taken,  dr  leave  the  copy  and  receipt  at  the  place  where  the 
property  was  taken. 

The  officer  executing  this  warrant,  dr  an  dfScer  present  during  the  execution  of  the  waif  ant,  inust  prepare  an  inventory 
as  required  by  law  and  promptly  return  this  waitant  and  inventory  to _ _ Hon.  Beryl  A.  Howell _ . 

(United  States  Magistrate  Judge) 


O  Pursuant  to  1 8  U.S.C.  .§  3r03a(b),  I  find  that  itumediate  notification  may  have  an  adverse  result  listed  in  18  U.S..C. 

§  2705  (except  for  delay  of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  dr  whose 
property,  will  be  searched  or  seized  (check  the  appropriate  box) 

□  for _ ddcys  (not  to  exceed  JO)  □  uiitil,  the  facts  justifying,  the  latcr  Specific  date  of  _ 


Date  and  time  issued:- 


City  and  ^tate:  Washington,  DC  Hon.  Beryl  A.  Howell,  Chief  U.S.  District  Judge 

Printed  name  and  title 
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Ap  93  (Rev.  1 1/1 33  Search  md  Seizure.  Warrant  (Page  2) 


Return 

Case  No.  t 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventoiy  left  with: 

Inventoiy  made  in  the  presence  of : 

Tnventory  of  the  property  takM  and  name  of  any  person(s)  seized: 


Certifieatibn 


I  declare  tinder  penalty  qf  perjury  that  this  inveritoiy  is  correct  and  .was  returned  along  with  the  original  warrant  to  the 
designated  judge. 


Date: 


ExeGutmg  officer  *s  signature 


Printed  name  and  Me 
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ATTACHMENT  A 

This  warrant  applies  to  information  associated  with  the  Google  Mail  Account 
l^gmaiLcom  that  is  stored  at  premises  owned,  maintained,  controlled,  or  operated 
by  Google,  a. company  headquartered  at  1 600  Amphitheatre  Parkway,  Mountain  View,  CA  94043. 
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ATTACHMENT  B 

I.  Information  to  be  disclosed  by  Google 

To  the  extent  that  the  information  described  in  Attachntent  A  is  within  the  possession, 
custody,  Or  control  of  the  Google  (hereinafter  ‘The  Provider”),  regardless  of  whether  such 
information  is  stored,  held  or  maintained  inside  or  outside  of  the  United  States,  and  including  any 
emails,  records,  files,  logs,  or  information  that  have  been  deleted  but  are  still  available  to  the 
Provider,  the  Provider  is  required  to  disclose  the  following  information  to  the  government  for  each 
account  or  identifier  listed  in  Attachment  A: 

aT"  The  contents  of  all"emailsh^ciated  wththe  account,  including  stored  or  preserved 

copies  of  emails  sent  to  and  from  the  account,  diaft  emails,  the  source  and 
destination  addresses  associated  with  each  email,  the  date  and  time  at  which  each 
email  was  sent,  and  the  size  and  length  of  each  email; 

b.  All  records  or  other  information  regarding  the  identification  of  the  account,  to 
include  full  name,  physical  address,  telephone  numbers  and  other  identifiers, 
records  of  session  times  and  durations,  the  date  on  which  the  account  was  created, 
the  length  of  service,  the  IP  address  used  to  register  the  account,  log-in  IP  addresses 
associated  with  session  times  and  dates,  account  status,  alternative  email  addresses 
provided  during  registration,  methods  of  connecting,  log  files,  and  means  and 
source  of  payment  (including  any  credit  or  bank  account  number); 

c.  The  types  of  service  utilized; 

d.  All  records  or  other  information  stored  at  any  time  by  an  individual  using  the 
account,  including  address  books,  contact  and  buddy  lists,  calendar  data,  pictures, 
and  files; 

e.  All.  records  pertaining  to  communications  between  the  Provider  and  any  person 
regarding  the  account,  including  Contacts  with  support  services,  and  records  of 
actions  taken;  and  other  identifiers,  records  of  session  times  aiid  durations,  the  date 
on  Which  the  account  was  created,  the  length  of  service,  the  types  of  service  utilized, 
the  IP  address  used  to  register  the  account,  log-in  IP  addresses  associated  with 
session  times  and  dates,  account  status,  alternative  e-mail  addresses  provided 
during  registration,  all  Other  user  names  associated  With  the  account,  all  account 
names  associated  with  the  subscriber,  methods  Of  connecting; 
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f.  All  search  history  or  web  history; 

g.  All  records  indica:ting  the  seiwices  available  to  subscribers  of  the  accounts; 

h.  All  usemaihes  associated  with  or  sharing  a,  login  IP  address  or  browser  cookie  with 
the  accounts; 

1.  All  cookies,  including  third-party  cookies,  associated  with  the  user; 

j.  All  records  that  are  associated  with  the  machine  cookies  associated  with  the  user; 
and 

k.  All  telephone  or  instrument  numbers  associated  with  the  Account  (including  MAC 

-  addresses— Electronic  ^er-ial—lNlumbers  -  (—ESN— ), — ^Mobile— Electronic— Identilyf 

Numbers  (“MEIN”),  Mobile  Equipment  Identifier  (“MEID”),  Mobile  Identification 
Numbers  (“MIN”),  Subscriber  Identity  Modules  (“SIM”),  Mobile  Subscriber 
Integrated  Services  Digital  Network  Number  (“MSISDN”),  International  Mobile 
Subscriber  Identifiers  (“IMSI”),  or  International  Mobile  Equipment  Identities 
(“IMEI”). 

n.  Information  to  be  Seized  by  the  Government 

All  information  described  above  in  Section  I  that  constitutes  evidence,  contraband,  fruits, 
and/or  instrumentalities  of  violations  of  18  U.S.C.  §  1014  (false  statements  to  a  financial 
institution),  18  U.S.C.  §  1343  (wire  fraud),  18  U.S.C,  §  1344  (bank  fraud),  and  18  U.S.C.  §  1956 
(money  laundering),  as  well  as  18  U.S.C.  §  951  (acting  as  an  unregistered  foreign  agent)  and  the 
Foreign  Agents  Registration  Act  (“FARA”),  22  U.S.C.  §  611  et  s&q.,  involving  Michael  Dean 
Cohen  and  occurring  on  or  after  June  1,  2015,  including,  for  each  account  or  identifier  listed  on 
Attachment  A,  Information  pertaining  to  the  following  matters: 

a.  Communications,  records,  documents,  and  other  files  involving  Essential 
Consultants,  LLC; 

b.  Comrnunications,  records,  documents,  and  other  files  that  false  representations  to.  a 
financial  institution  with  relation  to  intended  the  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an 
account  a  financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the 
purpose  or  nature  of  any  financial  transactions  involving  that  financial  institution; 
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c.  Records  of  any  funds  or  benefits  received  by  or  offered  to  Michael  Dean  Cohen  by, 
or  on  behalf  of,  any  foreign  government,  foreign  officials,  foreign  entities,  foreign 
persons,  or  foreign  principals; 

d.  Communications,  records,  documents,  and  other  files  that  reveal  efforts  by  Michael 
Dean  Cohen  to  conduct  activities  on  behalf  of,  for  the  benefit  of,  or  at  the  direction 
of  any  foreign  government,  foreign  officials,  foreign  entities,  foreign  persons,  or 
foreign  principals; 

e.  Evidence  indicating  how  and  when  the  account  was  accessed  or  used,  to  deteimine 
_ the-geographic-an(lehronologioal-Context-Q£accounlacc6SS,Jise,_and  events  relating 

to  the  crimes  under  investigation  and  to  the  account  owner; 

f.  Evidence  indicating  the  account  owner’s  state  of  mind  as  it  relates  to  the  crimes 
under  investigation; 

g.  The  identity  of  the  person(s)  who  created  or  used  the  account,  including  records 
that  help  reveal  the  whereabouts  of  such  person(s);  and 

h.  The  identity  of  any  person(s) — ■including  records  that  help  reveal  the  whereabouts 
of  the  personfs) — who  communicated  with  the  account  about  any  matters  relating 
to  activities  conducted  by  Michael  Dean  Cohen  on  behalf  of,  for  the  benefit  qf,  or 
at  the  direction  of  any  foreign  government,  foreign  officials,  foreign  entities, 
foreign  persons,  or  foreign  principals. 

III.  Review  ProtpcDls 

Review  of  the  items  described  in  Attachment  A  and  Attachment  B  shall  be  conducted 
pursuant  to  established  procedures  designed  to  collect  evidence  in  a  manner  consistent  with 
professional  responsibility  requirements  concerning  the  maintenance  of  attorney-client  and  other 
operative  privileges.  When  appropriate,  the  procedures  shall  include  use  of  a  designated  “filter 
team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address  potential  privileges. 
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Exhibit  C 
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AO  -93  (Rev.  11/13)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

District  of  Columbia 


In  the  Matter  of  the  Search  of 
(Briefly  describe  the.  property  to  be.  searched 
or  idertlijy  the.person  by  name  and  address) 


JNEORMATION  associated  with  the  account 

^^■j^^^^^HWHICH  IS  STORED  AT  THE 
^^^^REMISES  OF  i&1  INTERNET,  iNC. 


) 

) 

) 

) 

) 

) 


Case:  i;17-mj-"00854 

Assigned  To  :  Chief  Judge  Howell,  Beryl  A. 

Assign,  Date :  11/13/2017 

Description:  Search  and  Seizure  Warrant 


SEARCH  AND  SEIZURE  WARRANT 


Any-authoTized-Iaw-enfoTGemeBt-Gffiee-r - — - - - ________ - - - — 

An  .application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 

of  the  following  person  or  property  located  in  the  No.rthern _ _  District  of  _  California 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  Us  location)\ 


See  Attachment  A. 


r  find  that  the  afFidavitts),  or  any  recorded  testimony,  establish  pi^obable  cause  to  search  and  seize  the  person  or  property 
described  above,  and  that  such  search  will  reveal  (identify  the  person  or  describe  the  properly  to  be  seized): 

See  Attachment  B. 


YOU  ARE  COMMANDED  to  execute  this  waiTant  on  or  before  November  20,  2017  (not  to  exceed  14  days) 

in  the  daytime  6:00  a,m.  to  10:00  p,m.  D  at  any  time  in  the  day  or  night  because  good  cause  has  been  established. 


Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt,  for  the  property  taken  to  the 
person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the  place  where  the 
property  was  taken. 

The  officer  executing  this  wairant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an  inventory 
as  required  by  law  and  promptly  return  this  warrant  and  inventory  to _ Hon.  Beryl  A,  Howell  _ .  . 

(United  States  Magistrate  Judge) 

□  Pursuant  to  18  U,S,G/§  3i03a(b),l  find  that  immediate  notification  may  have.an  adverse  result  listed  in  18  U.S.C. 

.§  2705  (except  for  delay  of  trial),  and  authorize  the  officer  executing  this  wan’ant  to  delay  notice  to  the  person  who,  or  whose 
propeity,  will  be  searched  or  seized  (check  the  appropriate  box) 

P  for _ days  (not  to  exceed  30)  □  until,  the  facts  justifying,  the  later  specific  date  of  _ _ . 


Date-  and  time  issued: 


City  and  states  Washington,  DC 


Hpn.  Beryl  A.  HoWell,  Chief  U.S.  District  Judge 

Printed  name  and  title 


Case  l:18-cr-00602-WHP  Document  48-6  Filed  07/18/19  Page  51  of  80 


AO  93  (Rev.  1 1/13)  Search  and  Seizure  Warrant  (Page .2) 


Rpturji 

Case  No,: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of  : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 

Certification 


1  deplare.  under  penalty  of  peijury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant  to  the 
designated  judge, 


Date: 


Executing  officer  *s  signature 


Printed  nam^  Md  title 
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ATTACHMENT  A 


This  warrant  applies  to  information  associated  with  the  email 


is  stored  at  premises  owned,  maintained,  controlled,  or  operated  by  l&l  Internet,  Inc.  (“l&l”),  an 
electronic  communication  and/or  remote  computing  service  provider  headquartered  in  Sunnyvale, 
California. 
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ATTAGIIMENT  B 

I.  Information  to  be  disclosed  by  l&l 

To  the  extent  that  the  infoiTnation  described  in  Attachiheht  A  is  within  the  possession, 
custody,  or  control  of  the  1&]  (hereinafter  “the  Provider”),  regardless  of  whether  suph  infonhation 
is  stored,  held  or  maintained  inside  or  outside  of  the  United  Statesj  and  including  tiny  emails, 
records,  files,  logs,  or  information  that  have  been  deleted  but  ai’e  still  available  to  the  Provider,  the 
Provider  is  required  to  disclose  the  following  information  to  the  government  for  each  account  or 
identifier  listed  in  Attachment  A: 

~a^~  The  contents  ofalTemMis-assoeiated  with  tlre'arccoontrimcludhigstored  or  preserved' 
copies  of  emails  sent  to  and  from  the  account,  draft  emails,  the  source  and 
destination  addresses  associated  with  each  email,  the  date  and  time  at  which  each 
email  was  sent,  and  the  size  and  length  of  each  email; 

b.  All  records  or  other  information  regarding  the  identification  of  the  account,  to 
include  full  name,  physical  address,  telephone .  numbers  and  other  identifiers, 
records  obsession  times  and  durations,  the  date  on  which  the  account  was  created, 
the  length  of  service,  the  IP  address  used  to  register  the  account,  log-in  IP  addresses 
associated  with  session  times  and  dates,  account  status,  alternative  email  addresses 
provided  during  registmtion,  methods  of  connecting,  log  files,  and  means  and 
source  of  payment  (including  any  credit  or  bank  account  number); 

c.  The  types  of  seivice  utilized; 

d.  All  records  or  other  information  stored  at  any  time  by  an  individual  using  the 
account,  including  address  books,  contact  and  buddy  lists,  calendar  data,  pictures, 
and  files; 

e.  All  records  pertaining  to  communications  between  the  Provider  and  any  person 
regarding  the  account,  including  contacts  with  support  services  and  records  of 
actions  taken;  and  other  identifiers,  records  of  sessidh  times  arid  durations,  the  date 
oh  which  the  account  was  created,  the  length  of  service,  the  types  of  seivice  utilized, 
the  IP  address  used,  to  register  the  account,  log-ili  IP  addresses  a:ssociated  with 
session  times  and  dates,  account  status,  alternative  e-rttail  addresses  provided 
during  registration,  all  other  user  names  associated  with  the  account,  all  account 
names  associated  with  the  subscriber,  methods  of  connecting; 
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fi  All  search  history  or  web  history; 

g.  All  records  indicating  the  seiwices  available  to  subscribers  of  the  accounts; 

h.  All  usernames  associated  with  or  sharing  a  login  IP  address  or  browser  cookie  with 
the  accounts; 

i.  All  cookies,  including  tiiird-party  cookies,  associated  With  the  user; 

j.  All  records  that  are  associated  with  the  machine  cookies  associated  witli  the  user; 
and 

k.  All  telephone  or  instrument  numbers  associated  with  the  Account  (including  MAC 

_ _ ! _ addresses,  Ptecf.rnnic  Serial  Numbers  (“ESN’^,  Mobile  Electronic  Identity 

Numbers  (“MEIN”),  Mobile  Equipment  Identifier  (“MEID”),  Mobile  Identification 
Numbers  ("MIN”),  Subscriber  Identity  Modules  ("SIM”),  Mobile  Subscriber 
Integrated  Services  Digital  Network  Number  (“MSISDN”),  International  Mobile 
Subscriber  Identifiers  (“IMSI”),  or  International  Mobile  Equipment  Identities 
("IMEI”). 

II.  Information  to  be  Seized  by  the  Government 

All  information  described  above  in  Section  I  that  constitutes  evidence,  contraband,  fraits, 
and/or  instrumentalities  of  violations  of  18  U.S.G.  §  1014  (false  statements  to  a  financial 
institution),  18  U.S.C.  §  1343  (wiie  fraud),  18  U.S.C.  §  1344  (bank  fraud),  and  18  U.S.C.  §  1956 
(money  laundering),  as  well  as  18  U.S.C.  §  951  (acting  as  ah  unregistered  foreign  agent)  and  the 
Foreign  Agents  Registration  Act  ("FARA”),  22  U.S.C.  §  611  et  seq.,  involving  Michael  Dean 
Cohen,  including,  for  each  account  or  identifier  listed  on  Attachment  A,  inforhiation  pertaining  to 
the  following  matters: 

a.  Communications,  records,  documents,  and  other  files  involving  Essential 
Consultants,  LLC; 

b.  Communications,  records,  documents,  and  other  files  that  false  representations  to  a 
financial  institution  with  relation  to  intended  the  purpose  of  an  accoturt  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  ah 
account  a  financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the 
purpose  or  nature  of  any  financial  transactions  involving  that  financial  institution; 
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c.  Records  of  any  funds  or  benefits  received  by  or  offered  to  Michael  Dean  Cohen  by, 
or  on  behalf  of,  any  foreign  government,  foreign  officials,  foreign  entities,  foreign 
persons,  or  foreign  principals; 

d.  Communications,  records,  documents,  and  other  files  that  reveal  efforts  by  Michael 
Dean  Cohen  to  conduct  activities  on  behalf  of,  for  the  benefit  of,  or  at  the  direction 
of  any  foreign  government,  foreign  officials,  foreign  entities,  foreign  persons,  or 
foreign  principals; 

e.  Evidence  indicating  how  and  when  the  account  was  accessed  or  used,  to  determine 

— - — ^the-geograph  ic;  and-chronol  ogical-context  of  aGcountaGces&,-usev  and  events-relating 

to  the  crimes  under  investigation  and  to  the  account  owner; 

f.  Evidence  indicating  the  account  owner’s  state  of  mind  as  it  relates  to  the  crimes 
under  investigation; 

g.  ■  The  identity  of  the  person(s)  who  created  or  used  the  account,  including  records 

that  help  reveal  the  vvhereabouts  of  such  person(s.);  and 

h.  The  identity  of  any  person(s) — including  records  that  help  reveal  the  whereabouts 
of  the  persoh(s)— who  communicated  with  the  account  about  any  matters  relating 
to  activities  conducted  by  Michael  Dean  Cohen  on  behalf  of,  for  the  benefit  of,  or 
at  the  direction  of  any  foreign  government,  foreign  officials,  foreign  entities, 
foreign  persons,  or  foreign  principals* 

III.  Review  Protocols 

Review  of  tlie  items  described  in  Attachment  A  and  Attachment  B  shall  be  conducted 
pursuant  to  established  procedures  designed  to  collect  evidence  in  a  manner  consistent  with 
professional  responsibility  requirements  concerning  the  maintenance  of  attorhey'-client  and  other 
operative  privileges.  When  appropriate,  the  procediu'es  shall  include  use  of  a  designated  “filter 
team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address  potential  privileges. 
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Exhibit  D 
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AO  93  (Rev,  1 1/13)  Search  and  Seizure  Warrant 


UNITED  States  District  Court 

for  the 

District  of  Columbia 


In  the  Matter  of  the  Search  of  ) 

(Briefly  describe  (he  property  to  be  searched  ) 

or  identify  the  person  by  name  and  address)  ) 

INFORMATION  ASSOCIATED  WITH  THE  APPLE  ID  ) 
^^^^^■^GMAIL.COM  THAT  IS  STORED  AT  ) 
PREMISES  CONTROLLED  BY  APPLE,  INC.  ) 


ase:  17-mj-00570 
Bsigned  To  ;  Howell.  Beryl  A. 
ssign.  Date  8/7/2017 


SEARCH  AND  SEIZURE  WARRANT 


To:  Any  authorized  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 

of  the  following  person  or  property  located  in  the  _ _  Northern _  District  of  _ 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location}'. 


See  Attachment  A. 


1  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or  property 
described  above,  and  that  such  search  will  reveal  (identify  (he  person  or  describe  the  property  to  be  seized): 

See  Attachment 


YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before  Aij'gLIgt  21,  2017  (not  to  exceed  14  days) 

Sf  in  the  daytime  6:00  a.m.  to  10:00  p.m.  O  at  any  time  in  the  day  or  night  because  good  cause  has  been  established. 

Unless  delayed  notice  Is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property  taken  to  the 
person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the  place  where  the 
property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an  inventory 

as  required  by  law  and  promptly  return  this  warrant  and  inventory  to _ _ _  Hon.  Beryl  A.  Hovyell . . . . . 

(United  Stales  Magistrate  Judge) 

.  □  Pursuant  to  18  U.S.C.  §  3103a(b),  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C. 

§  2705  (except  for  delay  of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose 
property,  will  be  searched  or  seized  (check  the  appropriate  box) 

□  for  ____  days  (not  to  exceed 30)  □  until,  the  facts  justifying,  the  later  specific  date  of  _ _ _ _ _ _ _  ^ 


City  and  state:  Washington,  DC 


Hon,  Beryl  A.  Howell,  Chief  U.S.  District  Judge 
Printed  name  and  title 
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AO  93  (Rev.  11/13)  Search  and  Seizure  Wanant  (Page  2) 


Return 

Case  No.: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized; 


Ceftifichttdti 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant  to  the 
designated  judge. 


Date: 


Executing  officer's  signature 


Printed  name  and  title 
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ATTACHMENT  A 


This  warrant  applies  to  information  associated  with  the  Apple  ID 
@gniaii.coni  that  is  stored  at  premises  owned,  maintained,  controlled,  or  operated 
by  Apple,  Inc.  (“Apple”),  a  company  headquartered  at  1  Infinite  Loop,  Cupertino,  CA  95014. 
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ATTACHMENT  B 

I.  Information  to  be  disclosed  by  Apple,  Inc. 

To  the  extent  that  the  information  described  in  Attachment  A  is  within  the  possession, 
custody,  or  control  of  Apple,  Inc.  (hereinafter  “the  Provider”),  regardless  of  whether  such 
information  is  stored,  held  or  maintained  inside  or  outside  of  the  United  States,  and  including  any 
emails,  records,  files,  logs,  or  information  that  have  been  deleted  but  are  still  available  to  the 
Provider,  the  Provider  is  required  to  disclose  the  following  information  to  the  government  for  each 
account  or  identifier  listed  in  Attachment  A: _ _ ___ 

a.  The  contents  of  all  emails  associated  with  the  account,  including  stored  or  preserved 
copies  of  emails  sent  to  and  from  the  account,  draft  emails,  the  source  and 
destination  addresses  associated  with  each  email,  the  date  and  time  at  which  each 
email  was  sent,  and  the  size  and  length  of  each  email; 

b.  All  records  or  other  information  regarding  the  identification  of  the  account,  to 
include  full  name,  physical  address,  telephone  numbers  and  other  identifiers, 
records  of  session  times  and  durations,  the  date  on  which  the  account  was  created, 
the  length  of  service,  the  IP  address  used  to  register  the  account,  log-in  IP  addresses 
associated  with  session  times  and  dates,  account  status,  alternative  email  addresses 
provided  during  registration,  methods  of  connecting,  log  files,  and  means  and 
source  of  payment  (including  any  credit  or  bank  account  number); 

c.  The  types  of  service  utilized; 

d.  All  records  or  other  information  stored  at  any  time  by  an  individual  using  the 
account,  including  address  books,  contact  and  buddy  lists,  calendar  data,  pictures, 
and  files; 

e.  All  records  pertaining  to  communications  between  the  Provider  and  any  person 
regarding  the  account,  including  contacts  with  support  services  and  records  of 
actions  taken;  and  other  identifiers,  records  of  session  times  and  durations,  the  date 
on  which  the  account  was  created,  the  length  of  service,  the  types  of  service  utilized, 
the  IP  address  used  to  register  the  account,  log-in  IP  addresses  associated  with 
session  times  and  dates,  account  status,  alternative  e-mail  addresses  provided 
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during  registration,  all  other  user  names  associated  with  the  account,  all  account 
names  associated  with  the  subscriber,  methods  of  connecting; 

f.  All  search  history  or  web  history; 

g.  All  records  indicating  the  services  available  to  subscribers  of  the  accounts; 

h.  All  usernames  associated  with  or  sharing  a  login  IP  address  or  browser  cookie  with 
the  accounts; 

i.  All  cookies,  including  third-party  cookies,  associated  with  the  user; 

j.  All  records  that  are  associated  with  the  machine  cookies  associated  with  the  user; 

~~~  - and - — - ^ - — — ^ ^ - — — — - 

k.  All  telephone  or  instrument  numbers  associated  with  the  Account  (including  MAC 
addresses.  Electronic  Serial  Numbers  (“ESN”),  Mobile  Electronic  Identity 
Numbers  (“MEIN”),  Mobile  Equipment  Identifier  (“MEID”),  Mobile  Identification 
Numbers  (“MIN”),  Subscriber  identity  Modules  (“SIM”),  Mobile  Subscriber 
Integrated  Services  Digital  Network  Number  (“MSISDN”),  International  Mobile 
Subscriber  Identifiers  (“IMSI”),  or  International  Mobile  Equipment  Identities 
(“IMEl”). 

IL  Information  to  be  Seized  by  the  Government 

All  information  described  above  in  Section  I  that  constitutes  evidence,  contraband,  fruits, 
and/or  instrumentalities  of  violations  of  18  U.S.C.  §  1014  (false  statements  to  a  financial 
institution),  18  U.S.C.  §  1344  (bank  fraud),  18  U.S.C.  §  1956  (money  laundering),  ISU.S.C.  §951 
(acting  as  an  unregistered  foreign  agent),  and  22  U.S.C.  §  6 1 1  et  seq.  (Foreign  Agents  Registration 
Act),  involving  Michael  Dean  Cohen  and  occurring  on  or  after  January  1, 2016,  including,  for  each 
account  or  identifier  listed  on  Attachment  A,  information  pertaining  to  the  following  matters; 

a.  Communications,  records,  documents,  and  other  files  involving  Essential 
Consultants,  EEC; 

b.  Communications,  records,  documents,  and  other  files  involving  Bo  and  Abe  Realty, 
EEC; 

c.  Communications,  records,  documents,  and  other  files  that  false  representations  to  a 
financial  institution  with  relation  to  intended  the  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an 
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account  a  financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  J 

purpose  or  nature  of  any  financial  transactions  involving  that  financial  institution; 

d.  Records  of  any  funds  or  benefits  received  by  or  offered  to  Michael  Dean  Cohen  by, 

or  on  behalf  of,  any  foreign  government,  foreign  officials,  foreign  entities,  foreign  j 

persons,  or  foreign  principals;  k 

e.  Communications,  records,  documents,  and  other  files  that  reveal  efforts  by  Michael 
Dean  Cohen  to  conduct  activities  on  behalf  of;  for  the  benefit  of  or  at  the  direction 
of  any  foreign  government,  foreign  officials,  foreign  entities,  foreign  persons,  or 

— - — ^foreign-prineipalsj . . '  ^ - - — ^ - - - — — - — ^ - ____| 

f.  Evidence  indicating  how  and  when  the  account  was  accessed  or  used,  to  determine  j 

the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  I' 

to  the  crimes  under  investigation  and  to  the  account  owner;  j 

g.  Evidence  indicating  the  account  owner’s  state  of  mind  as  it  relates  to  the  crimes  I 

under  investigation;  j 

h.  The  identity  of  the  person(s)  who  created  or  used  the  account,  including  records  i 

that  help  reveal  the  whereabouts  of  such  person(s);  and  j 

i.  The  identity  of  any  person(s)— including  records  that  help  reveal  the  whereabouts  j 

of  the  person(s)- — who  communicated  with  the  account  about  any  matters  relating  j 

to  activities  conducted  by  Michael  Dean  Cohen  on  behalf  of,  for  the  benefit  of,  or  j 

at  the  direction  of  any  foreign  government,  foreign  officials,  foreign  entities,  j 

foreign  persons,  or  foreign  principals. 
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Exhibit  E 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


El  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 
Associated  with  the  Email  Accounts 
l@gmail.com,  . 
I@gmail.com,  and 

I  Maintained  at 
Premises  Controlled  by  Google,  Inc., 
USAO  Reference  No.  2018R00127 


Search  Warrant  and  Non-Disclostire  Order 

TO:  Google,  Inc.  (“Provider”) 

United  States  Attorney’s  Office  for  the  Southern  Dishict  of  New  York  and  the  Federal 

Bureau  of  Investigation  (collectively,  the  “Investigative  Agencies”) 

1.  Warrant  Upon  an  affidavit  of  Special  Agent  the  United  States 

Attorney’s  Office  for  the  Southern  District  of  New  York,  and  pursuant  to  the' provisions  of  the 
Stored  Communications  Act,  18  U.S.C.  §  2703(b)(1)(A)  and  §  2703(c)(1)(A),  and  the  relevant 
provisions  of  Federal  Rule  of  Criminal  Procedure  41,  the  Court  hereby  finds  there  is  probable 
cause  to  believe  the  email  accounts  ^^^^^^^@gmail.com,  ^^^|@gmail.com,  and 

maintained  at  premises  controlled  by  Google,  Inc.,  contain  evidence, 
fruits,  and  instrumentaUties  of  crime,  all  as  specified  in  Attaclxments  A  and  B  hereto.  Accordingly, 
the  Provider  is  hereby  directed  to  provide  to  the  Investigative  Agencies,  within  7  days  of  the  date 
of  service  of  this  Warrant  and  Order,  the  records  specified  in  Section  11  of  Attachments  A  and  B 
hereto,  for  subsequent  review  by  law  enforcement  personnel  as  authorized  in  Sections  III  and  IV 
of  Attachments  A  and  B.  The  Government  is  required  to  serve  a  copy  of  this  Warrant  and  Order 
on  the  Provider  within  7  days  of  the  date  of  issuance.  The  Wanant  and  Order  may  be  served  via 


Case  l:18-cr-00602-WHP  Document  48-6  Filed  07/18/19  Page  65  of  80 


electronic  transmission  or  any  other  means  throngh.  which  the  Provider  is  capable  of  accepting 
service. 

2.  Non-Disclosnre  Order.  Pursuant  to  18  U.S.C.  §  2705(b),  the  Court  finds  that  there  is 
reason  to  believe  that  notification  of  the  existence  of  this  warrant  will  result  in  destruction  of  or 
tampering  with  evidence  or  flight  from  prosecution,  or  otherwise  will  seriously  jeopardize  an 
ongoing  investigation.  Accordingly,  it  is  hereby  ordered  that  the  Provider  shall  not  disclose  the 

'existencenof  this^Warranhand^ Order  to  the  listed  subscriber  or  to  any  other  persOmfor  a  period-ofi 

180  days  from  the  date  of  this  Order,  subject  to  extension  upon  application  to  the  Court  if 
necessary,  except  that  Provider  may  disclose  this  Warrant  and  Order  to  an  attorney  for  Provider 
for  the  purpose  of  receiving  legal  advice , 


3.  Sealing.  It  is  further  ordered  that  tlris  Warrant  and  Order,  and  the  Affidavit  upon  which 
it  was  issued,  be  filed  under  seal,  except  that  the  Government  may  without  further  order  of  this 
Court  seiwe  the  Warrant  and  Order  on  the  Provider;  provide  copies  of  the  Affidavit  or  Warrant  and 
Order  as  need  be  to  personnel  assisting  the  Government  in  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure 


obligations  in  any  prosecutions  related  to  this  matter. 


Dated:  New  York,  New  York 


Date  Issued 


Southern  District 


2 


02.28.2018 
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Email  Search  Attachment  A 
I.  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  Google,  Inc.  (the  “Provider”),  headquartered  at  1600 
Amphitlreatre  Parkway,  Mountain  View,  California  94043,  and  applies  to  all  content  and  other 
information  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email  account 
l^gmail.comi  (the  “Subject  Account”)  for  the  time  period  referenced  below. 

-ArlaWenforcemenf  o££ieer-will-serve-this-warranfby-tr-ansmitting-it-via-emailor-anofher 


appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  II  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  IE  below, 
n.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Account: 

a.  Email  content.  All  emails  sent  to  or  fiom,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Account,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email) 
limited  to  items  sent,  received,  or  created  between  November  14, 2017  and  the  date  ofthis  warrant, 
inclusive. 


b.  Address  book  information.  All  address  book,  contact  list,  or  similar  hiformation 
associated  with  the  Subject  Account. 

c.  .  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Account,  including  but  not  limited  to  name,  username,  address,  telephone 
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niimber,  alternate  email  addresses,  registeation  ff  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Account, 
including  any  IP  logs  or  other  records  of  session  times  and  durations,  limited  to  items  sent, 
received,  or  created  between  December  1, 2014  and  the  date  of  this  warrant,  inclusive. 

e.  Customer  correspondence.  All  correspondence  with  the  subscriber  or  others  associated 

~TOtlrilre~SuhjectA:ccountrincluding‘complaints7inq[uiries7nr  other  eontactsvvith'SUppGrt-serviees 

and  records  of  actions  taken,  limited  to  items  sent,  received,  or  created  between  December  1, 2014 
and  the  date  of  this  warrant,  inclusive. 

f.  Search  History.  All  search  history  and/or  web  history  associated  with  the  Subject 
Account,  limited  to  items  sent,  received,  or  created  between  December  1,2014  and  the  date  of  this 
warrant,  inclusive. 

g.  Associated  content.  All  Google  Docs,  files  maintained  on  Google  Drive,  and  instant 
messages  or  Gchats  associated  with  the  Subject  Account,  limited  to  items  sent,  received,  or  created 
between  December  1 , 20 1 4  and  the  date  of  this  warrant,  inclusive. 

h.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  18 
U.S.C.  §  2703(f)  or  otherwise. 

ni.  Review  ofinformation  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  ofihcers  and  • 
agents,  .attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical  expeits  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
andinstrumentahties  of  violations  of  18  U.S.C.  §§  371  (conspiracy  to  commit  offense  or  to  defraud 


02.28rZ018 


2 
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the  United  States),  1005  (false  bank  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (bank  fraud),  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Account; 

b.  Communications,  records,  documents,  and  other  files  involving  Sterling  National 
Bank,  Melrose  Credit  Union,  and/or  taxi  medallions; 

cT^Cornmunicationsrrecordsrdocumentsyand  other  filesfinvolving-a  planrproposahror 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  others,  including  to^^^^^^^^^^^and/or 
entities  associated  with  him; 

d.  Communications,  records,  documents,  and  other  files  involving  Essential  Consultants, 
T.T.C  or  Michael  D.  Cohen  &  Associates,  including  those  which  indicate  the  nature  and  purpose  of 
payments  made  to  or  from  Essential  Consultants  or  Michael  D.  Cohen  &  Associates; 

e.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  any  person(s)  —  includmg  records  that  reveal  the  whereabouts  of  the  person(s)  —  who 
communicated  with  the  Subject  Account  about  any  matters  relating  to  Essential  Consultants,  LLC, 
or  about  any  plaii  or  proposal  or. agreement  for  Michael  D.  Cohen  and/or  entities  associated  with 
him  to  transfer  any  interest  hr  taxi  medallions,  and  any  associated  debts  or  liabilities,  to  others, 
including  to  ^^^^^^^^md/or  entities  associated  with  him; 

f.  Communications  between  the  Subject  Account  and  Jeffrey  Getael  relating  to  Michael 
D.  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 

g.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purp  ose  of  an  account  or  loan  at  that  financial 
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institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 

h.  Evidence  indicating  how  and  when  the  Subject  Account  was  accessed  or  used,  to 
determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner;  and 

Evidence  indicdtihglfie^Subj^tTAccount  owner’sTntentwltrelatesAo'the^Subject 
Offenses  under  investigation. 

IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
estabhshed  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attomey-chent  or  other  apphcable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  firom  the  investigative  team,  in  order  to  address 
potential  privileges. 


02.28.2018 
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Email  Search  Attachment  B 
I.  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  Google,  Inc.  (the  “Provider”),  headquartered  at  1600 
Amphitheatre  Parkway,  Mountain  View,  California  94043,  and  applies  to  all  content  and  other 
information  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email 
accounts  ^^^|gmail.com  and (the  “Subject  Accounts”)  for  the  time 

period-between-October-l,-20d6-and-the-date-of-thisxvarrant, -inclusive. - — 

A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another 
appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  E  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  witbin  the 
categories  specified  in  Section  IE  below, 
n.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’ s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Accounts: 

a.  Email  content.  All  emails  sent  to  or  from,  stored  in  draft  form  in,  or  otherwise 
associated  Avith  the  Subject  Accounts,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email). 

b.  Address  book  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Accounts. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Accounts,  including  but  not  limited  to  name,  username,  address,  telephone 
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number,  alternate  email  addresses,  registration  P  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Accounts, 
including  any  P  logs  or  other  records  of  session  times  and  durations. 

e.  Customer  correspondence.  All  correspondence  with  the  subscriber  or  others  associated 
with  the  Subj ect  Accounts,  including  complaints,  inquiries,  or  other  contacts  with  support  services 

“ahSTecords^of^actionsdakenT-^ - - — — — - — — - - 

f.  Search  History.  All  search  history  and/or  web  history  associated  with  the  Subject 
Accounts. 

g.  Associated  content.  AU  Google  Docs,  files  mamtained  on  Google  Drive,  'and  instant 
messages  or  Gchats  associated  with  the  Subject  Accounts. 

h.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  18 
U.S.C.  §  2703(10  or  otherwise. 

m.  Review  oflnformation  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical,  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  ftuits, 
and  instrumentahties  of  violations  of  18  U.S.C.  §§  371  (conspiracy  to  commit  offense  or  to  defraud 
the  United  States),  1005  (false  bank  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(whe  fraud),  and  1344  (banlc  fraud),  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Accounts; 
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b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabihties,  to and/or  entities  associated 
with  him; 

c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  any  person(s)  —  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 
communicated"witlrthe  Subject-Accouhtsmbout  any  matters-relating-to  any-plan  or  proposal-or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with,  him  to  transfer  any  interest  in  taxi 
medalhons,  and  any  associated  debts  or  liabilities,  to  ^^^^^^^^^|a.nd/or  entities  associated 
with  him; 

d.  Communications  between  the  Subject  Accounts  and  others,  including  employees  or 
representatives  of  Sterling  National  Bank,  Mehose  Credit  Union,  or  other  financial  institution(s), 
regarding  Michael  D.  Cohen’s  finances; 

e.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  puipose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  husiness  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  fluids  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 

f.  Evidence  indicating  how  and  when  the  Subject  Accounts  was  accessed  or  used,  to 

determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner;  .  . 

g.  Evidence  indicating  the  Subject  Accounts  owners’  intent  as  it  relates  to  the  Subject 
Offenses  under  investigation. 
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IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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Exhibit  F 
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UNTIED  STATES  DISTKICT  COUET 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 
_Asso^ted  with  the  Email  Account 
maintained 

Premises  Controlled  by  1  &  1  Internet, 
Inc.,  USAO  Reference  No. 
2018R00127 


- - SESRCH^WA3HUa^TYiM)1N^DN-DlSCLOStIREO 

TO:  1  &  1  Ihtemet,  Inc.  (“Provider”) 


United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  the  Federal 
Bureau  of  Investigation  (collectively,  the  “Investigative  Agencies”) 

1.  Warrant.  Upon  an  affidavit  of  Special  Agent  the  United  States 

Attorney’s  Office  for  the  Southern  District  of  New  York,  and  pui'suant  to  the  provisions  of  the 

Stored  Communications  Act,  18  U.S.C.  §.  2703(b)(1)(A)  and  §  2703(c)(1)(A),  and  the  relevant 

provisions  of  Federal  Rule  of  Criminal  Procedure  41,  the  Court  hereby  finds  there  is  probable 

cause  to  believe  the  email  accounl^^^^Q^^^^^^^naintained  at  premises  controlled  by  1 

&  1  Internet,  Inc.,  contains  evidence,  fruits,  and  instrumentalities  of  cfhne,  all  as  specified  in 

Attachment  D  hereto.  Accordiugly,  the  Provider  is  hereby  directed  to  provide  to  the  Investigative 

Agencies,  within  7  days  of  the  date  of  service  of  this  Warrant  and  Order,  the  records  specified  in 


Section  n  of  Attachment  D  hereto,  for  subsequent  review  by  law  enforcement  personnel  as 
authorized  in  Sections  III  and  TV  of  Attachment  D.  The  Government  is  requked  to  serve  a  copy 
of  this  Warrant  and  Order  on  the  Provider  within  14  days  of  the  date  of  issuance.  The  Warrant 
and  Order  may  he  served  via  electronic  transmission  or  any  other  means  through  which  the 


Provider  is  capable  of  accepting  service. 
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2.  Non-Disclosure  Order.  Pursuant  to  18  U.S.C.  §  2705(b),  the  Court  finds  that  there  is 
reason  to  believe  that  notification  of  the  existence  of  this  warrant  will  result  in  destruction  of  or 
tampering  with  evidence  or  flight  from  prosecution,  or  otherwise  will  seriously  jeopardize  an 
ongoing  investigation.  Accordingly,  it  is  hereby  ordered  that  the  Provider  shall  not  disclose  the 
existence  of  this  Warrant  and  Order  to  the  listed  subscriber  or  to  any  other  person  for  a  period  of 
180  days  from  the  date  of  this  Order,  subject  to  extension  upon  application  to  die  Court  if 
necessarj^excep1rthat“ProviderTnay'disclose-this-WarranPand-Order-to-an  attomey-for^Provider- 
for  the  purpose  of  receiving  legal  advice, 

3.  Sealing.  It  is  flirther  ordered  that  this  Warrant  and  Order,  and  the  Affidavit  upon  which 
it  was  issued,  be  filed  under  seal,  except  that  the  Government  may  without  further  order  of  this 
Court  serve  the  Warrant  and  Order  on  the  Provider;  provide  copies  of  the  Affidavit  or  Warrant  and 
Order  as  need  be  to  personnel  assisting  the  Government  in  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure 
obligations  in  any  prosecutions  related  to  this  matter. 

Dated:  New  York,  New  York 


<1 


M  ,  5 


Date  Issued 


Time  Isi 


Southern  District  of  i^ew,  York,  V 
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Email  Search  Attachment  D 
I.  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  1  &  1  Intemet,  Inc.  (the  “Provider”),  headquartered  at  701  Lee 
Road,  Suite  300,  Chesterbrook,  Pennsylvania  19087,  and  applies  to  all  content  and  other 
infomnation  within  the  Provider’spossession,  custody,  or  control  associated  with  the  email  account 
(the  “Subject  Account”)  for  the  time  period  between  November  14,  2017 


and  the  date  oPthis-warranVinclusive,- 


A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another 
appropriate  maimer  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
ofQcer  an  electronic  copy  of  the  information  specified  in  Section  II  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  III  below, 
n.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Account: 

a.  Email  content  All  emails  sent  to  or  from,  stored  in  draft  form  in,  or  other-wise 
associated  with  the  Subject  Account,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  vfith  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email). 

b.  Address  hook  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Account. 

c.  Subscriber  and  payment  information.  All  subscriber  ‘and  payment  information 
regarding  the  Subject  Account,  mcluding  but  not  limited  to  name,  username,  address,  telephone 


i 
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number,  alternate  email  addresses,  registration  IP  address,  aeeount  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Account, 
including  any  IP  logs  or  other  records  of  session  times  and  durations. 

e.  Customer  correspondence.  All  correspondence  with  the  subscriber  or  others  associated 
with  the  Subject  Account,  including  complaints,  inquiries,  or  other  contacts  with  support  services 

"and  recordS“ofTOtions"takem  ’ 

f.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  presei-vation  request  issued  pursuant  to  1 8 
U.S.C.  §  2703®  or  otherwise. 

TTT-  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  iruits, 
andinsttumentahties  ofviolations  of  18  U.S.C.  §§  371  (consphacyto  commit  offense  or  to  deftaud 
the  United  States),  1005  (false  bank  entnes);  1014  (false  statements  to  a  financial  institution),  1343 
(wire  firaud),  and  1344  (bank  firaud),  including  the  following: 

a.  Communications,  records,  documents,  and  otlrer  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  tire  Subject  Account; 

b.  Communications,  records,  documents,  and  other  files'  involving  Sterling  National 
Bank,  Melrose  Credit  Union,  and/or  taxi  medallions ; 

c.  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 


02.28.2018 


Case  l:18-cr-00602-WHP  Document  48-6  Filed  07/18/19  Page  79  of  80 


medallions,  and  any  associated  debts  or  liabilities,  to  others,  including  to 


ind/or 


entities  associated  with  him; 

d.  Communications,  records,  documents,  and  other  files  involving  Essential  Consultants, 
T.T.C  or  Michael  D.  Cohen  &  Associates,  including  those  which  indicate  the  nature  and  purpose  of 
payments  made  to  or  from  Essential  Consultants  or  Michael  D.  Cohen  &  Associates; 


e.  The  identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the 


■person(s)™whomoinmunicated'withThe-SubjectA;ccount  about  anyTnattersnrelatmg  to  Essentisd- 
Consultants,  LLC,  or  about  anyplan  or  proposal  or  agreement  for  Michael  D.  Cohen  and/or  entities 


associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 


and/or  entities  associated  with  him; 


liabilities,  to  others,  including  to 


f.  Communications  between  the  Subject  Account  and  Jeffrey  Getzel  relating  to  Michael 
D.  Cohen’s  banlc  accounts,  taxes,  debts,  and/or  finances; 

g.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with-  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  accoxmt  at  a  financial  institution; 
the  source  of  fiuids  flowing  iiito  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 

h.  Evidence  indicating  how  and  when  the  Subject  Account  was  accessed  or  used,  to 
determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner;  and 

i.  Evidence  indicating  the  Subject  Account  owner’s  intent  as  it  relates  to  the  Subject 
Offenses  under  investigation. 
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IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “^Tilter  team/'  separate  and  apart  from  the  investigative  team,  in  order  to  address 


potential  privileges. 
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MAG 

UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  re:  Warrant  and  Order  For  Prospective 
and  Historical  Location  Information  and 
Pen  Register  Information  for  the 
Cellphones  Assigned  Call  Numbers 

US  AO  Reference  No.  2018R00127 


WARRANT  AND  ORDER 


18  Mag. 


Warrant  and  Order 

for  Cellphone  Location  Information  and  Pen  Register  Information 
and  for  Sealing  and  Non-Disclosure 

TO:  AT&T  (“Service  Provider”),  and  any  subsequent  provider  of  service  to  the  Target 

Cellphones  specified  below  (“Subsequent  Service  Provider”) 

United  States  Attorney’s  Office  and  Federal  Bureau  of  Investigation  (“Investigative 
Agencies”) 

Upon  the  Application  and  Agent  Affidavit  submitted  by  the  Government  in  this  matter: 

L  Findings 

The  Court  hereby  finds: 

1 .  The  Target  Cellphones  (the  “Target  Cellphones”)  that  are  the  subject  of  this  Order  are 

assigned  call  numhers  and^^^|^^H,  are  subscribed  to  in  the  name  of  Michael 

Cohen  (the  “Suhscriher”)  and  are  currently  serviced  by  the  Service  Provider. 

2.  Pursuant  to  18  U.S.C.  §  2703(c)(1)(A)  and  the  applicable  provisions  of  Rule  41  of  the 
Federal  Rules  of  Criminal  Procedure,  the  Government’s  application  sets  forth  prohahle  cause  to 
believe  that  the  prospective  and  historical  location  information  for  the  Target  Cellphone  will  reveal 
evidence,  fruits,  or  instrumentalities  of  suspected  violations  of  52  U.S.C.  §§  30116(a)(1)(A)  and 
30109(d)(l)(A)(l)  (“the  Subject  Offense”). 

3.  Pursuant  to  18  U.S.C.  §  2703(d),  the  Government’s  application  also  sets  forth  specific 
and  articulable  facts  showing  that  there  are  reasonable  grounds  to  believe  that  the  historical 
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location  information  and  toll  records  for  the  Target  Cellphone  are  relevant  and  material  to  an 
ongoing  criminal  investigation. 

4.  Pursuant  to  1 8  U.S.C.  §  3 123(b)(1),  the  Government  has  certified  that  the  pen  register 
information  for  the  Target  Cellphones  is  relevant  to  an  ongoing  investigation  by  the  Investigating 
Agencies  of  Michael  Cohen  and  others  unknown  in  connection  with  suspected  violations  of  the 
Subject  Offense. 

5.  Pursuant  to  18  U.S.C.  §  2705(b),  there  is  reason  to  believe  that  notification  of  the 
existence  of  this  Warrant  and  Order  will  result  in  destruction  of  or  tampering  with  evidence,  danger 
to  the  physical  safety  of  an  individual,  flight  from  prosecution,  and/or  intimidation  of  potential 
witnesses,  or  otherwise  will  seriously  jeopardize  an  ongoing  investigation. 

NOW,  THEREFORE,  pursuant  to  Fed.  R.  Grim.  P.41, 18U.S.C.  §§  3121  etseq.,  18U.S.C. 
§§  2701  etseq.,  and  18  U.S.C.  §  3103a,  IT  IS  HEREBY  ORDERED; 
n.  Order  to  Service  Provider 

6.  Service  Provider.  This  Order  shall  apply  to  the  Service  Provider  specified  above,  and 
to  any  subsequent  provider  of  service  to  the  Target  Cellphones  without  need  for  further  Order  of 
this  Court. 

7.  Prospective  Location  Information.  The  Service  Provider  shall  provide  to  the 
Investigating  Agencies  on  a  prospective  basis,  for  a  period  of  45  days  from  the  date  of  this  Order 
(or  the  date  that  the  Target  Cellphones  are  seized,  whichever  comes  first),  information  concerning 
the  location  of  the  Target  Cellphones  (“Prospective  Location  Information”),  including  all 
available: 

a.  precision  location  information,  including  GPS  data,  E-911  Phase  II  data,  and 
latitude-longitude  data;  and 
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b.  cell  site  data,  including  any  data  reflecting  (a)  the  cell  towers  and  sectors  thereof 
utilized  in  routing  any  phone,  text,  or  data  conununication  to  or  from  the  Target  Cellphones,  and 
(b)  the  approximate  range  of  the  target  phone  from  the  cell  towers  during  the  communication 
(including  per-call  measurement  (“PCM”)  or  round-trip  time  (“RTT”  or  “NELOS”)  data); 

8.  Historical  Location  Information  and  Toll  Records.  The  Service  Provider  shall 
provide  to  the  Investigating  Agency  all  available  historical  cell  site  location  information  reflecting 
the  cell  towers  and  sectors  thereof  utilized  in  routing  any  phone,  text,  or  data  communication  to  or 
from  the  Target  Cellphones,  and  the  approximate  range  of  the  target  phone  from  the  cell  towers 


during  the  communication  (PCM/RTT  or  NELOS  data),  for  the  period  from  October  1,  2016 
tiirott^frtihc  date  of  1hjs~0rder,  as  well  as  all  available  toll  records  (including  call  detail,  SMS  detail, 
or  data  session  detail  records)  for  the  communications.  ^ 

9.  Pen  register  with  caller  identification  and/or  trap  and  trace  device.  The  Service 
Provider  shall  provide  to  the  Investigating  Agencies,  for  a  period  of  60  days  from  the  date  of  this 
order  (or  the  date  that  the  Target  Cellphones  are  seized,  whichever  comes  first),  all  dialing,  routing, 
addressing,  or  signaling  information  associated  with  each  voice,  text,  or  data  communication 
transmitted  to  or  from  the  Target  Cellphones,  including  but  not  limited  to:  ^  - 

a.  any  unique  identifiers  associated  with  the  phone,  including  ESN,  MEIN, 

MSISDN,  IMSI,  IMEI,  SIM,  MIN,  or  MAC  address; 

b.  source  and  destination  telephone  numbers  and/or  Internet  protocol  (“IP”) 


addresses;^ 


^  The  Service  Provider  is  not  required  to  provide  post-cut-through  dialed  digits  (“PCTDD”),  or  | 

digits  that  are  dialed  after  a  telephone  call  from  the  Target  Phone  has  been  connected.  If  possible,  i 

the  Service  Provider  will  forward  only  pre-cut-through-dialed  digits  to  the  Investigative  Agency.  f 

However,  if  the  Service  Provider’s  technical  capabilities  require  it  to  forward  all  dialed  digits,  I 

including  PCTDD,  to  the  Investigative  Agency,  the  hrvestigafive  Agency  will  only  decode  and 
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c.  date,  time,  and  duration  of  the  communication;  and 

d.  cell-site  information  as  specified  above. 

10.  Technical  Assistance.  The  Service  Provider  shall  furnish  the  Investigating  Agency  all 
information,  facilities,  and  technical  assistance  necessary  to  accomplish  the  disclosure  of  all  of  the 
foregoing  information  relating  to  the  Target  Cellphones  unobtrusively  and  with  the  minimum 
interference  to  the  service  presently  provided  to  the  Subscriber. 

11.  Non-Disclosure  to  Subscriber.  The  Service  Provider,  including  its  affiliates,  officers, 
employees,  and  agents,  shall  not  disclose  the  existence  of  this  Warrant  and  Order,  or  the  underlying 
investigation,  to  the  Subscriber  or  any  other  person,  for  a  period  of  180  days  from  the  date  of  this 
Warrant  and  Order,  subject  to  extension  upon  application  to  the  Coxirt,  if  necessary. 

III.  Additional  Provisions 

12.  Compensation  for  Costs.  The  Investigating  Agency  shall  compensate  the  Service 
Provider  for  reasonable  expenses  incurred  in  complying  with  the  Warrant  and  this  Order. 

13.  Sealing.  This  Warrant  and  Order,  and  the  supporting  Application  and  Agent  Affidavit, 
shall  be  sealed  until  otherwise  ordered  by  the  Court,  except  that  the  Government  may  without 
further  order  of  this  Court:  serve  this  Warrant  and  Order  on  the  Service  Provider;  provide  copies 
of  the  Warrant  and  Order  or  the  supporting  Application  and  Agent  Affidavit  as  need  be  to 


forward  to  the  agents  assigned  to  the  investigation,  the  numbers  that  are  dialed  before  the  call  is 
cut  through. 
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personnel  assisting  the  Government  in  the  investigation  and  prosecution  of  this  matter;  and 
disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure  obligations  in  any 
prosecutions  related  to  this  matter. 

Dated:  New  York,  New  York 


Date  Issued 


Time  Issued 


Tfl  JUDGE: 

Southern  District  of  New  York 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  re:  Warrant  and  Order  For  | 

Prospective  and  Historical  Location  i  APPLICATION 

Information  and  Pen  Register  i 

Information  for  the  ^Cellphone^  18  Mag. _ 

Assigned  Call  Numbers 

and  US  AO  Reference  | 

No.  2018R00127  i 

Application  for  Warrant  and  Order 
for  Cellphone  Location  and  Pen  Register  Information 

The  United  States  of  America,  by  its  attorney,  Robert  Khuzami,  Attorney  for  the  United 
States  Acting  Under  Authority  Conferred  by  28  U.S.C.  §  5 15,  Assistant  United 

States  Attorney,  of  counsel,  respectfully  requests  that  the  Court  issue  the  accompanying  proposed 
Warrants  and  Orders  for  prospective  and  historical  location  information  and  pen  register 
information  for  two  cellphones  (the  “Target  Cellphones”).  As  grounds  for  this  Application  the 
Government  relies  on  the  following  facts  and  authorities. 

I.  Introduction 

1 .  I  am  an  Assistant  United  States  Attorney  in  the  U.  S .  Attorney’ s  Office  for  the  Southern 
District  of  New  York.  This  Application  is  submitted  in  conjunction  with  the  accompanying 
affidavit  of  a  law  enforcement  agent  (“Agent  Affidavif’),  to  be  sworn  before  this  Court,  and 
incorporated  by  reference  herein.  I  make  this  Application  based  on  information  and  belief, 
including  the  Agent  Affidavit,  my  review  of  other  documents  in  the  case,  and  information  received 
from  investigative  personnel. 
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2.  The  Investigating  Agency,  Target  Cellphones,  Subscriber,  Target  Subject(s),  Service 
Provider,  Subject  Offenses,  Successor  Service  Provider,  and  Successor  Cellphones  referenced  in 
this  Application  are  as  specified  in  the  Agent  Affidavit. 

IL  Legal  Authority 

A,  Prospective  Location  Information 

3.  The  Government  seeks  to  obtain  both  precision  location  information  and  cell  site  data 
for  the  Target  Cellphones  on  a  prospective  basis  (the  “Prospective  Location  Information”)  for  a 
period  of  45  days  from  the  date  of  this  order  -  the  same  period  of  time  for  which  a  warrant  for  a 
tracking  device  may  be  granted  imder  Rule  41(e)(2)(C).  It  bears  noting,  however,  that  while  the 
Prospective  Location  Information  may  permit  “tracking”  the  user  of  the  phone  in  the  colloquial 
sense,  this  is  not  an  application  for  a  warrant  for  a  “tracking  device”  as  defined  in  Fed.  R.  Ciim. 
P.  41(a)(2)(E)  and  18U.S.C.  §  3117(b).  Those  provisions  only  apply  where  an  agent  is  seeking  to 
physically  install  a  tracking  device  on  a  given  object.  Instead,  the  Prospective  Location 
Information  will  be  obtained  by  requiring  the  Service  Provider  to  provide  the  information. 

4.  The  authority  for  this  application  is  found  in  18  U.S.C.  §§  2703(c)(1),  which  authorizes 
a  court  of  competent  jurisdiction  to  require  any  electronic  communication  service  provider  (which 
includes  a  cellular  telephone  service  provider^)  to  disclose  any  “record  or  other  information 
pertaining  to  a  subscriber”  other  than  the  “contents  of  communications,”  when  the  government 
obtains,  inter  alia,  a  warrant  under  the  procedures  of  Rule  41.  See  18  U.S.C.  §  2703(c)(l)(A).^ 


^  See  18  U.S.C.  §  2711(1)  (incorporating  by  cross-reference  statutory  definitions  set  forth  in  18 
U.S.C.  §  2510);  18  U.S.C.  §  2510(15)  (defining  “electronic  communication  service”  as  “any 
service  which  provides  to  users  thereof  the  ability  to  send  or  receive  wire  or  electronic 
communications”) . 

^  Another  provision  of  18  U.S.C.  §  2703(c)(1),  specifically,  §  2703(c)(1)(B),  enables  the 
Government  to  compel  an  electronic  communication  service  provider  to  disclose  non-content 
information  pertaining  to  a  subscriber  by  obtaining  an  order  issued  under  18  U.S.C.  §  2703(d), 
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Because  data  concerning  a  subscriber’s  location,  such  as  precision  location  information  and  cell 
site  data,  constitutes  “itiformation  pertaming  to  a  subscriber”  that  does  not  include  the  “contents 
of  conummications,”  that  data  is  among  the  types  of  information  available  under  §  2703(c)(l)(A).^ 
Further,  as  specified  m  18  U.S.C.  §  271 1(3),  this  Court  is  a  court  of  competent  jurisdiction  under 
the  Stored  Communications  Act  because  it  has  jurisdiction  over  the  Subject  Offenses. 

5.  The  Government’s  request  for  cell  site  data  also  implicates  the  pen  register  statute, 
because  such  data  constitutes  signaling  information  used  by  the  Service  Provider  to  route 


communications  to  and  from  the  Target  Cellphones.  In  order  to  collect  such  data,  a  valid  pen 
register  order  is  required."*  Accordingly,  I  hereby  certify  pursuant  to  18  U.S.C.  §  3122  that  such 


instead  of  a  warrant.  Rather  than  requiring  a  showing  of  probable  cause,  a  §  2703(d)  order  requires 
only  a  showing  that  there  are  reasonable  grounds  to  believe  that  the  information  sought  is  relevant 
and  material  to  an  ongoing  criminal  investigation.  However,  given  that  continued  monitoring  of 
an  individual’s  specific  location  through  precision  location  information  arguably  implicates  Fourth 
Amendment  interests,  see  United  States  v.  Jones,  565  U.S.  400,  418  (2012)  (Alito,  J.,  concurring 
m  the  judgment),  the  Government  here  seeks  to  obtain  the  Precision  Location  Information  sought 
herein  by  a  §  2703(c)  warrant  rather  than  a  §  2703(d)  order. 

^  See  In  re  Application,  460  F.  Supp.  2d  448,  459-60  &  n.  55  (S.D.N.Y.  2006)  (Kaplan,  J.) 
(cellphone  location  information  falls  within  §  2703(c)(1));  accord,  e.g..  United  States  v.  Caraballo, 
963  F.  Supp.  2d  341,  361  (D.Vt.  2013);  In  re  Order,  632  F.  Supp.  2d  202,  207  (E.D.N.Y.  2008); 
In  re  Application,  405  F.  Supp.  2d  435,  444-45  (S.D.N.Y.  2005).  But  see  In  re  Application,  849 
F.  Supp.  2d  526, 574  (D.Md.  201 1)  (rejecting  view  that  cellular  location  data  falls  within  the  scope 
of  the  SCA  and  finding  that  phone  must  be  treated  as  “tracking  device”  for  purposes  of  Rule  41 
where  used  to  collect  location  data);  In  re  Application,  2009  WL  159187,  at  *5-*6  (S.D.N.Y. 
Jan.l3, 2009)  (McMahon,  J.)  (same). 

"*  See  18  U.S.C.  §  3121  (prohibiting  use  of  pen  register  or  trap  and  trace  device  without  an  order 
imder  the  pen  register  statute);  3127(3)  &  (4)  (defining  pen  register  and  trap  and  trace  device  to 
include  devices  or  processes  that  record,  inter  alia,  signaling  information).  Although  cell  site  data 
constitutes  “signaling”  information  within  the  meaning  of  the  pen  register  statute,  a  separate  statute 
precludes  the  Government  from  relying  “solely”  on  the  authority  provided  by  the  pen  register 
statute  to  ascertain- a  subscriber’s  location.  47  U.S.C.  §  1002(a).  Here,  the  Government  seeks  to 
obtain  sUch  data  pursuant  to  18  U.S.C.  §  2703(c)  as  well  as  the  pen  register  statute,  rather  than 
“solely”  under  the  latter  statute.  See  In  re  Application,  460  F.  Supp.  2d  at  456-59. 
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signaling  information  is  relevant  to  an  ongoing  investigation  being  conducted  by  the  Investigating 
Agency  into  suspected  violations  of  the  Subject  Offenses  by  the  Target  Subject(s). 

B.  Historical  Location  Information 

6.  The  Government  also  seeks  historical  cell  site  data  for  the  Target  Cellphones  for  the  ^ 

kb rt) Art  o''  "Vu  p  t 

period  from  October  1, 2016  to  the  prosoat  (the  “Historical  Location  Information”).  Because  such 

data  constitutes  non-content  information  concerning  a  subscriber,  the  Court  is  authorized  to  order 

the  Service  Provider  to  provide  this  data  pursuant  to  a  warrant  application  under  18  U.S.C.  § 


2703(c)  or  an  application  for  an  order  under  18  U.S.C.  §  2703(d).  See  18  U.S.C.  §  2703(c)(1)(B). 
Pursuant  to  18  U.S.C.  §  2703(d),  I  respectfully  submit  that  the  Agent  Affidavit  offers  specific  and 
articulable  facts  showing  that  there  are  reasonable  grounds  to  believe  that  the  Historical  Location 
Information  is  relevant  and  material  to  an  ongoing  criminal  investigation.  Further,  although  a 
warrant  for  the  Historical  Location  Information  is  not  required,  I  respectfully  submit  that  the  same 
probable  cause  supporting  the  Government’s  request  for  a  warrant  to  obtain  the  Prospective 
Location  Information  requested  above  also  supports  the  issuance  of  a  warrant  under  §  2703(c)  for 
the  Historical  Location  Information.^  In  addition,  the  Government  seeks  toll  records  for  the  same 


^  A  warrant  is  not  required  to  obtain  historical  cell  site  information.  Individuals  do  not  have  a 
reasonable  expectation  of  privacy  in  historical  cell  site  information  because  individixals  voluntarily 
convey  that  information  to  third-party  service  providers.  See  United  States  v.  Graham,  824  F.3d 
421,  424-25  (4th  Cir.  2016)  {eti  banc)',  United  States  v.  Davis,  785  F.3d  498,  511-13  (11th  Cir. 
2015)  (en  banc),  cert,  denied,  136  S.  Ct.  479  (2015);  In  re  Application  of  US.  for  Historical  Cell 
Site  Data,  724  F.3d  600,  614-15  (5th  Cir.  2013);  United  States  v.  Guerrero,  768  F.3d  351,  358-59 
(5th  Cir.  2014);  see  also  United  States  v.  Pascual,  502  F.  App’x  75,  80  &  n.6  (2d  Cir.  2012),  cert, 
denied,  134  S.  Ct.  231  (2013)  (“general  principles”  of  third-party  doctrine  “point[  ]”  toward  this 
conclusion  regarding  cell-site  records);  but  see  United  States  v.  Ulbricht,  858  F.3d  71,  97  n.29  (2d 
Cir.  2017)  (declining  to  express  its  view  as  to  whether  the  Fourth  Amendment  appHes  to  historical 
cell  site  location  information).  Moreover,  because  historical  cell  site  information  does  not  enable 
law  enforcement  to  conduct  live  monitoring  of  a  person’s  location  within  private  spaces  such  as 
“the  interior  of  the  [person’s]  home,”  it  is  not  comparable  to  prospective  precision  location 
information,  for  which  a  warrant  is  arguably  required.  See  In  re  Application  of  US.  for  Order 
Directing  Provider  of  Elec.  Commc’n  Serv.  to  Disclose  Records  to  Gov’t,  620  F.3d  304,  312-15 
(3d  Cir.  2010).  Nevertheless,  because  the  Supreme  Court  has  recently  granted  certiorari  to  review 
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period  as  the  Historical  Location  Information  is  requested,  which  the  Government  is  also 
authorized  to  obtain  pursuant  to  1 8  U.S.C.  §2703(d). 

C.  Pen  Register  Information 

7.  Finally,  the  Government  seeks  an  order  pursuant  to  18  U.S.C.  §§  3121-26  authorizing 
the  use  of  a  pen  register  on  the  Target  Cellphones  for  a  period  of  60  days  from  the  date  of  this 
order  (or  the  date  that  the  Target  Cellphones  are  seized,  whichever  comes  first).  Specifically,  the 
Government  seeks  an  order  directing  the  Service  Provider  to  furnish  any  information,  facilities, 
and  technical  assistance  necessary  to  operate,  imobtrusively  and  with  minimum  disruption  of 
service,  a  pen  register  and  trap  and  trace  device  to  capture  all  dialing,  routing,  addressing,  or 
signaling  information  associated  with  each  call  transmitted  to  or  from  the  Target  Cellphones,  as 
specified  further  in  the  proposed  Warrant  and  Order  (the  “Pen  Register  Information”).^ 

8.  I  hereby  certify  pursuant  to  18  U.S.C.  §  3122  that  the  Pen  Register  Information  is 
relevant  to  an  ongoing  investigation  being  conducted  by  the  Investigating  Agency  mto  suspected 
violations  of  the  Subject  Offenses  by  the  Target  Subject(s). 


the  Sixth  Circuit’s  decision  in  United  States  v.  Carpenter,  819  F.3d  880,  887-90  (6th  Cir.  2016) 
(holdmg  Government’s  collection  of  business  records  containing  historical  cell  site  data  did  not 
constitute  search  under  Fourth  Amendment),  cert,  granted,  137  S.  Ct.  2211  (June  5,  2017)  (No. 
16-402),  the  Government,  in  an  abundance  of  caution,  requests  a  warrant  under  18  U.S.C.  § 
2703(c),  upon  articulation  of  probable  cause  as  set  forth  in  the  Agent  Affidavit. 

^  The  Government  is  also  not  seeking  authorization  to  obtain  post-cut-through  dialed  digits 
(“PCTDD”),  or  digits  that  are  dialed  after  a  telephone  call  from  the  Target  Phone  has  been 
connected.  Pursuant  to  the  attached  Order,  if  possible,  the  Provider  will  forward  only  pre-cut- 
through-dialed  digits  to  the  Investigating  Agency.  However,  if  the  Provider’s  technical 
capabilities  require  it  to  forward  all  dialed  digits,  including  PCTDD,  to  the  frivestigatuig  Agency, 
the  Investigating  Agency  will  only  decode  and  forward  to  the  agents  assigned  to  the  investigation 
the  numbers  that  are  dialed  before  the  call  is  cut  through. 
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D.  Sealing  and  Non-Disclosure  Order  to  Service  Provider 

9.  When  the  Government  obtains  records  or  information  under  §  2703(c),  it  is  not  required 
to  notify  the  subscriber  or  customer.  18  U.S.C.  §  2703(c)(3).  Additionally,  the  Government  may 
obtain  an  order  precluding  the  Provider  from  notifying  the  subscriber  or  any  other  third-party  of 
the  warrant  or  order  obtained,  for  such  period  as  the  Court  deems  appropriate,  where  there  is  reason 
to  believe  that  such  notification  will  result  in  endangering  the  life  or  physical  safety  of  an 
individual,  flight  from  prosecution,  destruction  of  or  tampering  with  evidence,  or  intimidation  of 
potential  witnesses,  or  will  otherwise  seriously  jeopardize  the  investigation.  18  U.S.C.  §  2705(b). 

10.  Further,  18  U.S.C.  §  3123(d)  provides  that  an  order  directing  installation  of  a  pen 
register  or  trap  and  trace  device  shall  direct  the  pertinent  service  provider  “not  to  disclose  the 
existence  of  the  pen  register  or  trap  and  trace  device  or  the  existence  of  the  investigation  to  the 
listed  subscriber,  or  to  any  other  person  unless  or  until  otherwise  ordered  by  the  Court.” 

11.  Accordingly,  as  explained  farther  in  the  Agent  Affidavit,  in  light  of  the  confidential 
nature  of  the  continuing  criminal  investigation  and  the  adverse  consequences  expected  in  the  event 
of  premature  notification,  the  Government  respectfully  requests  that  the  Court  direct  the  Service 
Provider  not  to  notify  the  Subscriber  or  any  other  person  of  the  Warrant  and  Order  sought  herein 
for  a  period  of  180  days,  subject  to  extension  upon  application  to  the  Court,  if  necessary. 

12.  For  similar  reasons,  I  respectfully  request  that  the  proposed  Warrant  and  Order,  this 

Application,  and  the  accompanying  Agent  Affidavit,  be  maintained  under  seal  until  the  Court 

orders  otherwise,  except  that  the  Government  be  permitted  without  further  order  of  this  Court  to 

serve  this  Warrant  and  Order  on  the  Service  Provider;  provide  copies  of  the  Warrant  and  Order  or 

the  supporting  Application  and  Agent  Affidavit  as  need  be  to  personnel  assisting  the  Government 

in  the  investigation  and  prosecution  of  this  matter;  and  disclose  these  materials  as  necessary  to 

comply  with  discovery  and  disclosure  obligations  in  any  prosecutions  related  to  this  matter. 
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III.  Prior  Requests 

14.  Except  as  may  be  set  forth  above,  no  prior  request  for  the  relief  requested  herein  has 
been  made. 


Dated:  New  York,  New  York 
April  7,  2018 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


AGENT  AFFIDAVIT 


18  Mag.  _ 


Agent  Affidavit  in  Support  of  Warrant  and  Order 
for  Cellphone  Location  and  Pen  Register  Information 


STATE  OF  NEW  YORK  ) 

)  ss. 

COUNTY  OF  NEW  YORK  ) 

Special  of  the  United  States  Attorney’s  Office  for  the  Southern 

District  of  New  York,  being  duly  sworn,  deposes  and  states: 

I.  Introduction 

1 .  I  am  a  Special  Agent  with  the  United  States  Attorney’s  Office  for  the  Southern  District 


In  re:  Warrant  and  Order  For  Prospective 
and  Historical  Location  Information  and 
Pen  Register  Information  for  the 


USAO  Reference  No.  2018R00127 


Cellphones  Assigned 
and 


Gall  Numbers 


of  New  York  (“Investigating  Agency”).  As  such,  I  am  a  “federal  law  enforcement  officer”  within 


the  meaning  of  Federal  Rule  of  Criminal  Procedure  41(a)(2)(C),  that  is,  a  government  agent 
engaged  in  enforcing  the  criminal  laws  and  duly  authorized  by  the  Attorney  General  to  request  a 
search  warrant.  I  have  been  a  Special  Agent  with  the  USAO  since  August  2016.  I  previously 
served  as  a  Special  Agent  with  the  United  States  Department  of  Labor  Inspector  General  from 
May  201 1  to  August  2016.  In  the  course  of  my  experience  and  training  in  these  positions,  I  have 
participated  in  numerous  investigations  involving  the  use  of  cellphone  location  data. 

2.  Requested  Information.  I  respectfully  submit  this  Affidavit  pursuant  to  18  U.S.C. 
§§  2703(c)  and  (c)(1)(A)  and  the  applicable  procedures  of  Federal  Rule  of  Criminal  Procedure  41 ; 
18  U.S.C.  §§  2703(d)  &  2705;  and  18  U.S.C.  §§  3121-3126,  in  support  of  a  warrant  and  order  for 
prospective  location  information,  historical  location  information,  toll  records,  and  pen  register 
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information,  for  the  Target  Cellphones  identified  below  (collectively,  the  “Requested 
Information”). 

3.  Basis  for  Knowledge.  This  Affidavit  is  based  upon  my  participation  in  the 
investigation,  my  examination  of  reports  and  records,  and  my  conversations  with  other  law 
enforcement  agents  and  other  individuals,  as  well  as  my  training  and  experience.  Because  this 
Affidavit  is  being  submitted  for  the  limited  purpose  of  obtaining  the  Requested  Information,  it 
does  not  include  all  the  facts  that  I  have  learned  during  the  course  of  this  investigation.  Where  the 
contents  of  documents  and  the  actions,  statements,  and  conversations  of  others  are  reported  herein, 
they  are  reported  in  substance  and  in  part,  except  where  otherwise  indicated.  In  addition,  unless 
otherwise  indicated,  statements  by  others  referenced  in  this  Affidavit  were  not  necessarily  made 
to  me,  but  may  have  been  provided  to  me  by  someone  else  to  whom  I  have  spoken  or  whose  report 
I  have  read  (and  who  in  turn  may  have  had  either  direct  or  indirect  knowledge  of  the  statement). 
Similarly,  unless  otherwise  indicated,  information  in  this  Affidavit  resulting  from  surveillance 
does  not  necessarily  set  forth  my  personal  observations,  but  may  have  been  provided  to  me  by 
other  law  enforcement  agents  who  observed  the  events,  and  to  whom  I  have  spoken  or  whose 
report  I  have  read. 

4.  Target  Cellphones,  Subscriber,  Target  Subject,  and  Service  Provider.  The  Target 
Cellphones  referenced  in  this  Affidavit  are  the  cellphones  assigned  call  numbers 
and^^^^^^^|.  As  further  discussed  below,  the  Target  Cellphones  are  subscribed  to  in  the 
name  of  Michael  Cohen  (the  “Subscriber”).  The  Subscriber  is  believed  to  use  the  Target 
Cellphones  and  is  a  Target  Subject  of  this  investigation.  AT&T  is  the  Service  Provider  for  the 
Target  Cellphones. 
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5.  Precision  Location  Capability.  Cellphone  service  providers  have  technical 
capabilities  that  allow  them  to  collect  at  least  two  kinds  of  information  about  the  locations  of  the 
cellphones  to  which  they  provide  service;  (a)  precision  location  information,  also  known  as  E-91 1 
Phase  II  data,  GPS  data,  or  latitude-longitude  data,  and  (b)  cell  site  data,  also  known  as 
“tower/face”  or  “tower/sector”  information.  Precision  location  information  provides  relatively 
precise  location  information  about  a  cellphone,  which  a  provider  can  typically  collect  either  via 
GPS  tracking  technology  hiiilt  into  the  phone  or  by  triangulating  the  device’s  signal  as  received 
by  the  provider’s  nearby  cell  towers.  Cell  site  data,  by  contrast,  reflects  only  the  cell  tower  and 
sector  thereof  utilized  in  routing  any  communication  to  and  jfrom  the  cellphone,  as  well  as  the 
approximate  range  of  the  cellphone  from  the  tower  during  the  commimication  (sometimes  referred 
to  as  “per-call  measurement”  (“PCM”)  or  “round-trip  time”  (“RTT”  or  ‘TSIELOS”  data).  Because 
cell  towers  are  often  a  half-mile  or  more  apart,  even  in  urban  areas,  and  can  be  ten  or  more  miles 
apart  in  rural  areas,  cell  site  data  is  typically  less  precise  than  precision  location  information.  Based 
on  my  training  and  experience,  I  know  that  the  Service  Provider  has  the  technical  ability  to  collect 
precision  location  information  from  any  cellphone  on  its  network,  includmg  by  mitiating  a  signal 
on  the  Service  Provider’s  network  to  determine  the  phone’s  location.  I  further  know  that  cell  site 
data  is  routinely  collected  by  the  Service  Provider  in  the  course  of  routing  calls  placed  to  or  from 
any  cellphone  on  its  network.^ 

6.  Successor  Service  Provider.  Because  it  is  possible  that  the  Target  Subject  may  change 
cellphone  service  provider  during  the  course  of  this  investigation,  it  is  requested  that  the  warrant 


^  Toll  records  are  sometimes  necessary  or  helpful  in  order  to  obtain  or  interpret  historical  cell  site 
data  and  are  therefore  also  requested  herein. 
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and  investigative  order  requested  apply  without  need  for  further  order  to  any  Sueeessor  Service 
Provider  who  may  provide  service  to  the  Target  Cellphones  during  the  time  frames  at  issue  herein. 

II.  Facts  Establishing  Probable  Cause 

7.  Although  I  understand  that  probable  cause  is  not  necessary  to  obtain  all  of  the 
Requested  Information,  I  respectfully  submit  that  probable  cause  exists  to  beheve  that  the 
Requested  Information  will  lead  to  evidence  of  the  crime  of  52  U.S.C.  §§  30116(a)(1)(A)  and 
30109(d)(l)(A)(l)  (illegal  campaign  contributions)  (the  “Subject  Offense”),  as  well  as  the  location 
of  the  Target  Subject  who  is  engaged  in  the  Subject  Offense. 

Introduction 

8.  The  USAO  and  the  Federal  Bureau  of  Investigation  (the  “FBF’)  are  investigating  a 
criminal  violation  of  the  campaign  finance  laws  by  Michael  Cohen,  a  lawyer  who  holds  himself 
out  as  the  personal  attorney  for  President  Donald  J.  Trump.  As  detailed  below,  there  is  probable 
cause  to  believe  that  Cohen  made  an  excessive  in-ldnd  contribution  to  the  presidential  election 
campaign  of  then-candidate  Donald  Trump  in  the  form  of  a  $130,000  pa)mient  to  Stephanie 
Clifford,  an  individual  who  was  rumored  to  have  had  an  extramarital  affair  with  Trump,  in 
exchange  for  her  agreement  not  to  disclose  that  alleged  affair  on  the  eve  of  the  2016  presidential 
election. 

Prior  Relevant  Process 

9.  In  connection  with  an  investigation  then  being  conducted  by  the  Office  of  the  Special 
Counsel  (“SCO”),  the  FBI  sought  and  obtained  from  the  Honorable  Beryl  A.  Howell,  Chief  United 
States  District  Judge  for  the  District  of  Columbia,  three  search  warrants  for  emails  and  other 
content  information  associated  with  two  email  accounts  used  by  Cohen,  and  one  search  warrant 
for  stored  content  associated  with  an  iCloud  account  used  by  Cohen.  Specifically: 
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a.  On  or  about  My  1 8, 2017,  the  FBI  sought  and  obtained  a  search  warrant  for  emails 


in  the  account 


@gmail.com  (the  “Cohen  Gmail  Account”)  sent  or  received  between 


January  1, 2016  and  July  18, 2017  (the  “First  Cohen  Gmail  Warrant”). 

b.  On  or  about  August  8,  2017,  the  FBI  sought  and  obtained  a  search  warrant  for 


ffigmail.com  (the 


content  stored  in  the  iCloud  account  associated  with  Apple  ID  ; 


“Cohen  iCloud  Account”  and  the  “Cohen  iCloud  Warrant”). 

c.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  search  warrant  for 
emails  in  the  Cohen  Gmail  Accormt  sent  or  received  between  June  1 , 20 1 5  and  November  1 3 , 20 1 7 
(the  “Second  Cohen  Gmail  Warranf ’). 


d.  On  or  about  November  1 3,  2017,  the  FBI  sought  and  obtained  a  search  warrant  for 


[the  “Cohen  MDCPC  Account”)  sent  or  received 


emails  in  the  accoimt 


between  the  opening  of  the  Cohen  MDCPC  Account^  and  November  13,  2017  (the  “First  Cohen 
MDCPC  Warrant”). 

10.  The  SCO  has  since  referred  certain  aspects  of  its  investigation  into  Cohen  to  the  US  AO, 
which  is  working  with  the  FBI’s  New  York  Field  Office. 

11.  On  or  about  February  28,  2018,  the  US  AO  sought  and  obtained  search  warrants  for 
emails  in  Cohen  Gmail  Account  and  Cohen  MDCPC  Account,  among  other  accounts,  sent  or 
received  between  November  14,  2017  and  February  28,  2018  (the  “Third  Cohen  Gmail  Warrant” 
and  “Second  Cohen  MDCPC  Warrant”). 


^  Based  on  my  review  of  this  warrant  and  the  affidavit  in  support  of  it,  I  know  that  the  warrant  did 
not  specify  a  time  period,  but  the  affidavit  indicated  that,  pursuant  to  court  order,  the  service 
provider  had  provided  non-content  information  for  the  Cohen  MDCPC  Account  that  indicated  that 
the  account  contained  emails  fi:om  the  approximate  period  of  March  2017  through  the  date  of  the 
warrant. 
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12.  The  above-described  warrants  are  referred  to  herein  as  the  “Cohen  Emails  Warrants” 
and,  with  respect  to  the  iCloud  Warrant,  the  “Cohen  iCloud  Warrant.” 

The  Illegal  Campaign  Contribution  Scheme 

13.  From  my  review  of  public  sources,  I  have  learned  the  following: 

a.  In  or  around  October  2011,  there  were  rumors  published  on  the  gossip  website 
TheDirty.com  that  Trump  had  had  an  extramarital  affair  with  Clifford,  an  adult  film  actress  whose 
screen  name  is  Stormy  Daniels,  in  or  around  July  2006.  In  or  about  October  2011,  Life  &  Style 
Magazine,  a  tabloid  sold  in  supermarkets,  also  published  an  article,  based  on  the  report  in 
TheDiriy.com,  alleging  an  affair  had  occurred  between  Trump  and  Clifford.  Both  Trump  and 
Clifford,  through  their  representatives,  issued  denials  in  response  to  the  articles. 

h.  Specifically,  on  or  about  October  11,2011,  Keith  Davidson,  who  identified  himself 
as  Clifford’s  attorney,  sent  a  cease  and  desist  letter  to  TheDirty.com,  demanding  that  the  article 
regarding  Trump  and  Clifford  be  removed  from  the  website.  Additionally,  on  or  about  October 
12,  2011,  Cohen,  who  was  then  Executive  Vice-President  and  Special  Coimsel  to  the  Trump 
Organization,  stated  to  E!  News  that  “[t]he  totally  untrue  and  ridiculous  story . . .  emanated  from 

a  sleazy  and  disgusting  website _ The  Trump  Organization  and  Donald  J.  Trump  will  be  bringing 

a  lawsuit .  .  .  [and]  Mr.  Trump  and  the  Trump  Organization  would  like  to  thank  and  commend 
Stormy  Daniels  and  her  attorneys  for  their  honesty  and  swift  actions.” 

14.  On  or  about  June  16, 2015,  Trump  formally  launched  his  2016  presidential  campaign. 
On  or  about  May  4, 20 1 6,  Trump  became  the  presumptive  Republican  Party  nominee  for  president, 
and  on  July  19,  2016,  Trump  officially  became  the  nominee.  Based  on  my  review  of  public 
sources,  I  have  learned  that  while  it  does  not  appear  that  Cohen  had  an  official  title  as  part  of  the 
Tramp  campaign,  on  multiple  occasions  Cohen  made  public  statements  on  behalf  of  Tramp  or  his 
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campaign.  For  instance,  on  or  about  August  1 8, 20 1 6,  Cohen  appeared  on  CNN  to  defend  Trump’s  f 

I' 

polling  numbers.  t 

15.  On  or  about  October  7,  2016,  The  Washington  Post  published  online  a  video  and 
accompanying  audio  in  which  Trump  referred  to  women  in  what  the  article  described  as  “vulgar 
terms”  in  a  2005  conversation  with  Billy  Bush,  who  was  then  the  host  of  Access  Hollywood.  The 
following  day,  on  October  8,  2016,  Trump  appeared  in  a  video  in  which  he  stated,  among  other 
things,  “I’ve  said  and  done  things  I  regret  and  words  released  today  on  this  more  than  a  decade  old 

video  are  one  of  them.  Anyone  who  knows  me  knows  these  words  don’t  reflect  who  I  am.  I  said  j 

it.  I  was  wrong  and  I  apologize.”  Based  on  my  review  of  public  sources,  I  also  know  that 

il 

representatives  of  the  Trump  Campaign  stated,  in  sum  and  substance,  that  the  Access  Hollywood 
comment  was  an  old  and  isolated  incident. 

1 6.  Based  on  my  review  of  public  sources,  including  an  article  published  in  Slate  magazine 
by.  a  reporter  who  interviewed  Clifford,  that  around  this  same  time,  in  or  about  October  2016, 

Clifford  was  in  discussions  with  ABC’s  Good  Morning  America  show  and  Slate  magazine,  among 
other  media  sources,  to  provide  these  media  outlets  with  her  statement  about  her  alleged 
relationship  with  Trump.  According  to  the  article  in  Slate,  which  the  author  based  on  | 

conversations  with  Clifford  over  the  telephone  and  by  text  message,  Clifford  wanted  to  be  paid  for 

her  story  or  be  paid  by  Trump  not  to  disclose  her  accusation.  As  Cohen  summarized  in  a  2018 
email  obtained  pursuant  to  the  Cohen  Email  Warrants:  “In  October  2016,  I  was  contacted  by 
counsel  for  Ms.  Clifford  stating  that  news  outlets,  including  ABC  News,  were  pursuing  the  201 1 
story  of  an  alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.” 

I' 

I 
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17.  From  my  review  of  telephone  toll  records^  and  information  produced  pursuant  to  the 
iCloud  Warrant  and  Cohen  Email  Warrants,  I  have  learned  that  in  the  days  following  the  Access 
Hollywood  video,  Cohen  exchanged  a  series  of  calls,  text  messages,  and  emails  with  Keith 
Davidson,  who  was  then  Clifford’s  attorney,  David  Pecker  and  Dylan  Howard  of  American  Media, 
Inc.  (“AMI”),  the  publisher  of  the  National  Enquirer,"^  Trump,  and  Hope  Hicks,  who  was  then 
press  secretary  for  Trump’s  presidential  campaign.  For  these  text  messages  and  calls- — ^as  well  as 
all  of  the  text  messages  and  calls  referenced  in  this  affidavit  involving  Cohen — Cohen  used  one  of 


the  Target  Cellphones  for  the  communication. 

18.  Based  on  the  timing  of  the  calls  in  the  days  following  the  Access  Hollywood  story,  and 
the  content  of  the  text  messages  and  emails,  I  believe  that  at  least  some  of  these  communications 
concerned  the  need  to  prevent  Clifford  fiom  going  public,  particularly  in  the  wake  of  the  Access 
Hollywood  story.  In  particular,  I  have  learned  the  following: 

a.  On  October  8, 2016,  at  approximately  7:20  p.m.,  Cohen  received  a  call  from  Hicks. 
Sixteen  seconds  into  the  call.  Trump  joined  the  call,  and  the  call  continued  for  over  fom  minutes.^ 


^  My  attribution  of  certain  telephone  numbers  to  certain  individuals  as  described  in  this 
affidavit  is  based  on  my  review  of  the  vCard  (virtual  contact  file)  obtained  fiom  Cohen’s  telephone 
pursuant  to  the  iCloud  Warrant. 

^  Pecker  is  President  of  AMI  and,  according  to  his  own  statements  in  public  reports,  a  personal 
friend  of  Trump.  Howard  is  the  chief  content  officer  of  AMI,  who  according  to  public  records 
reports  directly  to  Pecker. 

^  I  believe  that  Trump  joined  the  call  between  Cohen  and  Hicks  based  on  my  review  of  toll 
records.  Specifically,  I  know  that  a  call  was  initiated  between  Cohen’s  telephone  number  and 
Trump’s  telephone  number  at  the  same  time  the  records  indicate  that  Cohen  was  talking  to  Hicks. 
After  the  Cohen-Tmmp  call  was  initiated,  it  lasted  the  same  period  of  time  as  the  Cohen-Hicks 
call.  Additionally,  the  toll  records  indicate  a  “-1”  and  then  Trump’s  telephone  number,  which, 
based  on  my  training  and  experience,  means  that  the  call  was  either  transferred  to  Trump,  or  that 
Trump  was  added  to  the  call  as  a  conference  or  three-way  call  participant.  In  addition,  based  on 
my  conversations  with  an  FBI  agent  who  has  interviewed  Hicks,  I  have  learned  that  Hicks  stated, 
in  substance,  that  to  the  best  of  her  recollection,  she  did  not  learn  about  the  allegations  made  by 
Clifford  until  early  November  2016.  Hicks  was  not  specifically  asked  about  this  three-way  call. 
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Based  on  the  toll  records  that  the  US  AO  has  obtained  to  date,  I  believe  that  this  was  the  first  call 
Cohen  had  received  or  made  to  Hicks  in  at  least  multiple  weeks,  and  that  Cohen  and  Trump  spoke 
about  once  a  month  prior  to  this  date  -  specifically,  prior  to  this  call  on  October  8,  2016,  Cohen 
and  Trump  had  spoken  once  in  May,  once  in  June,  once  in  July,  zero  times  in  August,  and  twice 
in  September. 

b.  Approximately  ten  minutes  after  the  call  ended,  Hicks  and  Cohen  spoke  again  for 
about  two  minutes. 

c.  At  7:39  p.m.,  immediately  after  the  second  call  with  Hicks  ended,  Cohen  called 
David  Pecker  (as  noted  above,  the  President  of  American  Media  Inc.,  or  AMI)  and  they  connected 
for  thirty  seconds.  Approximately  fom  minutes  later,  Cohen  called  Pecker  again  mid  they  spoke 
for  more  than  a  mmute.  Three  minutes  after  ending  his  call  with  Pecker,  Cohen  received  a  call 
from  Dylan  Howard  (as  noted  above,  the  Chief  Content  Officer  of  AMI),  and  they  spoke  for 
approximately  a  minute.  According  to  toll  records,  it  does  not  appear  that  Cohen  and  Howard 
spoke  regularly  prior  to  October  8,  2016,  as  it  had  been  over  a  month  since  they  had  called  each 
other. 

d.  At  7:56  p.m.,  approximately  eight  minutes  after  his  call  with  Howard  ended,  Cohen 
called  Hicks  and  they  connected  for  two  minutes.  At  approximately  the  same  time  this  call  ended, 
Cohen  received  a  call  from  Pecker,  and  they  spoke  for  about  two  minutes.  At  8:03  p.m.,  about 
three  minutes  after  ending  his  call  with  Pecker,  Cohen  called  Trump,  and  they  spoke  for  nearly 
eight  minutes. 

e.  At  8:39  p.m.  and  8:57  p.m.,  Cohen  received  calls  from  Howard  and  spoke  to  him 
for  about  four  and  six  minutes,  respectively.  At  9:13  p.m.,  about  ten  minutes  after  Cohen  and 
Howard  hung  up  from  the  second  of  these  calls,  Howard  sent  Cohen  a  text  message  that  said: 
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“Keith  will  do  it.  Let’s  reconvene  tomorrow.”  Based  on  my  involvement  in  this  investigation,  I 
believe  that  when  Howard  wrote  “Keith,”  he  was  referring  to  Keith  Davidson,  the  attorney  for 
Stephanie  Clifford.  At  3:31  a.m.,  now  on  October  9,  2016,  Cohen  sent  Howard  a  text  message  in 
response  that  said:  “Thank  you.”  Eight  minutes  later,  Cohen  sent  Howard  a  text  message  that  said: 
“Resolution  Consultants  LLC.  is  the  name  of  the  entity  I  formed  a  week  ago.  Whenever  you  wake, 
please  call  my  cell.” 

f  The  following  day,  on  October  10,2016,  at  10:58  a.m.,  Howard  sent  a  text  message 
to  Cohen  and  Davidson,  which  stated:  “Keith/Michael:  connecting  you  both  in  regards  to  that 
business  opportunity.  Spoke  to  the  client  this  AM  and  they’re  confirmed  to  proceed  with  the 
opportunity.  Thanks.  Dylan.  Over  to  you  two.”  At  12:25  p.m.,  Davidson  sent  Cohen  a  text  message 
tbat  stated:  “Michael  -  if  we  are  ever  going  to  close  this  deal  -  In  my  opinion,  it  needs  to  be  today. 
Keith.”  Davidson  and  Cohen  then  spoke  by  phone  for  about  three  minutes.  Based  on  my 
participation  in  this  investigation,  I  believe  that  when  Howard  wrote  that  the  “client”  was 
“confirmed  to  proceed  with  the  opportunity,”  he  was  referring  to  Clifford’s  agreement  in  principle 
to  accept  money  from  Cohen  in  exchange  for  her  agreement  not  to  discuss  any  prior  affair  with 
then-candidate  Trump.^ 

g.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
know  that  on  or  about  October  1 0, 2016,  Clifford  and  Davidson  appear  to  have  signed  a  “side  letter 
agreement”  that  stated  it  was  an  exhibit  to  a  “confidential  settlement '  agreement  and  mutual 

^  As  set  forth  below,  AMI  was  also  involved  in  a  payment  to  model  Karen  McDougal. 
However,  because  these  communications  were  in  close  temporal  proximity  to  the  events  involving 
the  negotiation  of  a  payment  to  Clifford,  the  execution  of  the  agreement  with  Clifford,  and  the 
payment  of  money  to  Clifford,  I  believe  that  these  communications  were  related  to  Clifford. 
Additionally,  based  on  my  review  of  public  statements  by  McDougal,  I  have  learned  that  she 
negotiated  an  agreement  with  AMI  several  months  prior  to  these  communications  between  Cohen 
and  Pecker,  Howard,  and  Davidson. 
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release”  between  “Peggy  Peterson”  and  “David  Dennison.”  The  purpose  of  the  document, 
according  to  the  agreement,  was  to  define  the  “true  name  and  identity”  of  persons  named  by 
pseudonym  in  “confidential  settlement  agreement  and  mutual  release.”  The  side  letter  agreement 
specifies  the  identity  of  “Peggy  Peterson”  to  be  Clifford,  but  the  space  for  “Dennison’s”  identity 
is  blank.  The  agreement  also  includes  a  signature  page  for  “Peterson,”  “Dennison,”  and  their 
attorneys.  The  signature  page  is  signed  by  “Peterson”  and  his  attorney,  Davidson,  but  the 
document  is  unsigned  by  “Dennison”  and  his  attorney.  Based  on  my  involvement  in  this 
investigation,  I  believe  that  Davidson  sent  Cohen  this  partially-signed  “side  letter  agreement”  in 
order  to  facilitate  the  closing  of  a  deal  between  Davidson’s  client  and  Cohen  or  his  client  on 
October  10, 2016. 

19.  It  appears  that  on  October  13,  2016,  and  the  days  that  followed,  Cohen  took  steps  to 
complete  a  transaction  with  Davidson,  including  attempting  to  open  an  accoimt  from  which  Cohen 
could  transfer  fimds  to  Davidson.  Specifically,  from  my  review  of  toll  records,  information 
obtained  pursuant  to  the  iCloud  Warrant  and  Cohen  Email  Warrants,  records  maintained  by  First 
Republic  Bank  (“First  Republic”),  as  well  as  my  participation  in  interviews  with  employees  of 
First  Republic,  I  have  learned  the  following: 

a.  On  the  morning  of  October  13, 2016,  at  8:54  a.m.,  Cohen  sent  Pecker  a  text  message 
that  stated:  “I  need  to  talk  to  you.”  At  9:06  a.m..  Pecker  sent  a  text  message  to  Cohen  that  stated, 
“I  called  please  call  me  back.”  The  tolls  between  Cohen  and  Pecker  do  not  show  a  telephone  call 
between  8:54  a.m.  and  9:06  a.m.  However,  based  on  my  review  of  text  messages,  I  have  learned 
that  Cohen  and  Pecker  communicate  with  each  other  over  Signal,  which  is  an  encr5ipted 
communications  cellphone  application  that  allows  users  to  send  encrypted  text  messages  and  make 
encrypted  calls. 


2018-04-07017.02.09 


11 


Case  l:18-cr-00602-WHP  Document  48-7  Filed  07/18/19  Page  24  of  38 


b.  At  9:23  a.m.,  Cohen  sent  an  email  that  stated  “call  me”  to  a  banker  at  First  Republic 
Bank  (“First  Republic  Employee-2”).  The  email  attached  documents  from  the  Secretary  of  State 
of  Delaware  indieating  that  Cohen  had  formed  a  limited  liability  company  called  “Resolution 
Consultants  LLC”  on  September  30, 2016.  As  noted  above,  “Resolution  Consultants”  is  the  name 
of  the  entity  that  Cohen  had  told  Howard  he  had  formed  recently  after  Howard  said  Davidson 
would  “do  it.”  At  10:44  a.m.,  Cohen  called  First  Republic  Employee-2  and  told  him,  in  sum  and 
substanee,  that  he  needed  an  aeeount  in  the  name  of  “Resolution  Consultants”  opened  immediately, 
and  that  he  did  not  want  an  address  on  the  checks  written  out  of  the  account.  Later  that  day,  another 
employee  at  First  Repuhlie  emailed  Cohen  account  opening  paperwork  to  eomplete.  Cohen 
returned  the  aeeount  opening  documents  partially  completed,  but  failed  to  provide  a  eopy  of  his 
driver’s  license  or  passport,  and  did  not  respond  to  the  employee’s  question  of  how  he  wanted  to 
fund  the  account.  As  a  result,  the  account  was  never  opened. 

e.  On  Oetoher  17, 2016,  Cohen  incorporated  Essential  Consultants  LLC  m  Delaware. 
That  same  day,  he  filed  paperwork  to  dissolve  Resolution  Consultants  LLC. 

20.  Despite  these  steps  taken  by  Cohen,  it  appears  that  the  negotiation  between  Cohen  and 
Davidson  was  not  progressing  sufficiently  fast  enough  for  Davidson  or  his  client,  Clifford,  and 
they  threatened  to  go  public  with  Clifford’s  allegations  just  days  before  the  presidential  eleetion. 
Specifieally,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  iCloud 
Warrant,  and  publie  sources,  I  know  the  following: 

a.  Aecording  to  an  article  in  The  Washington  Post,  which  quoted  emails  sent  from 
Cohen’s  email  aeeount  hosted  by  the  Trump  Organization,  on  October  17, 2016,  Davidson  emailed 
Cohen  and  threatened  to  cancel  the  aforementioned  “settlement  agreement”  by  the  end  of  the  day 
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if  Cohen  did  not  complete  the  transaction.^  According  to  the  article,  Davidson  sent  Cohen  a  second 
email  later  in  the  day  that  stated  in  part,  “Please  be  advised  that  my  client  deems  her  settlement 
agreement  canceled  and  void.”  At  4:00  p.m.  that  day,  Cohen  called  Davidson  and  they  spoke  for 
over  five  minutes. 

b.  Cohen’s  4:00  p.m.  call  with  Davidson  and/or  Davidson’s  threats  to  cancel  the 
“settlement  agreemenf  ’  appear  to  have  touched  off  a  flurry  of  communications  about  the  settlement 
agreement  and  whether  Clifford  would  go  public.  Specifically: 

i.  At  4:43  p.m.,  Howard  sent  Cohen  a  text  message  that  stated:  “I’m  told  they’re 
going  with  DailyMail.  Are  you  aware?”  One  minute  later,  Cohen  responded:  “Call  me.”  Based 
on  my  involvement  in  this  investigation,  I  understand  Howard’s  text  to  mean  that  he  heard  that 
Clifford  was  going  to  take  her  story  of  an  extramarital  affair  with  Trump  to  the  Daily  Mail,  a 
tabloid  newspaper. 

ii.  At  4:45  p.m.,  Howard  called  Cohen  and  they  spoke  for  over  two  minutes. 
Moments  later,  Davidson  and  Cohen  spoke  for  about  two  minutes. 

iii.  At  5:03  p.m.,  Cohen  attempted  to  call  Trump,  but  the  call  only  lasted  eight 
seconds.  This  was  Cohen’s  first  call  after  he  spoke  with  Davidson. 

iv.  At  5:25  p.m.,  Cohen  texted  Howard,  stating:  “Well???” 

V.  At  6 :44  p.m.,  Howard  responded  to  Cohen’s  text,  stating:  “Not  takuig  my  calls.” 
Cohen  responded  one  minute  later:  “You’re  kidding.  Who  are  you  trying  to  reach?”  Howard 
responded  one  minute  later:  “The  ‘agent.’”  Based  on  my  involvement  hi  this  investigation,  I 


^  Due  to  the  partially  covert  nature  of  the  investigation  to  this  date,  the  Government  has  not 
requested  documents  fi'om  the  Trump  Organization  or  Davidson,  and  thus  does  not  possess  the 
email  referenced  in  this  article. 
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understand  Howard’s  text  messages  to  mean  that  he  attempted  to  contact  Davidson  about  the 
matter  involving  Clifford,  but  that  Davidson  was  not  taking  Howard’s  calls. 

vi.  At  6:49  p.m.,  Cohen  called  Howard  and  they  spoke  for  nearly  four  minutes. 

c.  The  following  day,  on  October  18,  2016,  TheSmokingGun.com,  a  website  that 
publishes  legal  documents  and  mugshots,  published  an  article  called:  “Donald  Trump  and  the  Pom 
Superstar,”  which  alleged  that  Trump  had  an  extramarital  affair  with  Clifford.  However,  the 
article  noted  that  Chfford  had  declined  to  comment. 

21 .  On  or  about  October  25, 2016,  the  communications  between  Cohen,  Davidson,  Howard 
and  Pecker  picked  up  again,  apparently  concerning  a  transaction  involving  Clifford.  Specifically, 
based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen  Email  Warrants 
and  iCloud  Warrant,  as  well  as  my  review  of  public  sources,  I  have  learned  the  following: 

a.  On  October  25,  2016,  at  6:09  p.m.,  Howard  sent  Cohen  a  text  message  stating: 
“Keith  calling  you  urgently.  We  have  to  coordinate  something  on  the  matter  he’s  calling  you  about 
or  its  [sic]  could  look  awfully  bad  for  everyone.”  One  minute  later,  Davidson  sent  Cohen  a  text 
message  stating  “Call  me.”  Cohen  and  Davidson  called  each  other  several  times  over  the  next  half 
hour  but  appear  not  to  have  connected.  At  6:42  p.m.,  Cohen  and  Davidson  spoke  for  about  eight 
minutes.  At  7:1 1  p.m.,  they  spoke  for  another  two  minutes. 

b.  The  next  morning,  on  or  about  October  26,  2016,  at  8:26  a.m.,  Cohen  called  Trump 
and  spoke  to  him  for  approximately  three  minutes.  At  8:34  a.m.,  Cohen  called  Tmmp  again  and 
connected  for  a  minute  and  a  half. 

c.  At  approximately  9 : 04  a.m. — ^less  than  thirty  minutes  after  speaking  with  Trump — 
Cohen  sent  two  emails  to  the  person  who  had  incorporated  Resolution  Consultants  and  Essential 
Consultants  for  him,  and  stated  “can  you  send  me  asap  the  filing  receipt”  and  then,  in  the  second 
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email,  “for  Essential  Consultants  LLC.”  That  person  responded  with  the  filing  receipt  two  minutes 
later  at  9:06  a.m.  and  with  the  certification  of  formation  23  minutes  later,  at  9:27  a.m. 

d.  Shortly  after  that,  Cohen  contacted  a  particular  employee  at  First  Republic  (“First 
Republic  Employee-2”)  and  told  him,  in  siun  and  substance,  that  he  decided  not  to  open  an  account 
in  the  name  of  “Resolution  Consulting”  and  instead  would  be  opening  a  real  estate  consulting 
company  in  the  name  of  “Essential  Consultants.”  Cohen  told  First  Republic  Employee-2  that  he 
was  at  Trump  Tower,  and  wanted  to  go  to  a  First  Republic  branch  across  the  street  to  open  the 
account,  so  First  Republic  Employee-2  called  another  employee  of  First  Republic  (“First  Republic 
Employee-1”),  a  preferred  banker  at  that  branch,  to  assist  Cohen.  At  1 1:00  a.m..  First  Republic 
Employee- 1  called  Cohen.  I  know  from  my  participation  in  an  interview  with  First  Republic 
Employee- 1,  that  around  the  time  of  the  call  he  went  to  Cohen’s  office  in  Trump  Tower — on  the 
same,  floor  as  the  Trump  Organization — and  went  through  account  opening  questions,  including 
know  your  customer  questions,  with  Cohen.  In  response  to  a  series  of  know-your-customer 
questions  about  the  purpose  of  the  accoimt — ^the  answers  to  which  First  Republic  Employee-1 
entered  into  a  form — Cohen  stated,  in  sum  and  substance,  that  he  was  opening  Essential 
Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting  work, 
and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States.  Based 
on  my  review  of  records  obtained  firom  First  Republic,  it  appears  that  this  accoimt  (the  “Essential 
Consultants  Accounf ’)  was  created  at  a  time  between  1 1 :00  a.m.  and  1 :00  p.m. 

e.  At  1:47  p.m.,  Cohen  called  Davidson  and  they  spoke  for  approximately  two 
minutes.  At  approximately  1 :49  p.m.,  Davidson  emailed  Cohen  wiring  instructions  for  an  attorney 
client  trust  account  at  City  National  Bank. 
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f.  After  the  Essential  Consultants  Account  was  opened  on  October  26,  2016,  Cohen  j 

transferred  $131,000  from  a  home  equity  line  of  credit  that  Cohen  had  at  First  Republic  to  the 
Essential  Consultants  Account.  Following  the  transfer,  at  approximately  4:15  p.m.  on  October  26, 

2016,  First  Republic  Employee-2’s  assistant  emailed  Cohen  at  his  Trump  Organization  email 
address  to  tell  him  that  the  funds  had  been  deposited  into  the  Essential  Consultants  Account. 


Cohen  forwarded  that  email  to  the  Cohen  Gmail  Account  and  then  forwarded  it  to  Davidson. 

g.  At  6:37  p.m.,  Cohen  asked  Pecker  by  text  message,  “Can  we  speak?  Important.” 
Cohen  called  Pecker  at  6:49  p.m.  and  connected  for  thirty  seconds.  At  6:57  p.m.,  Cohen  sent 
Howard  a  text  message,  stating:  “Please  call  me.  Important.”  Cohen  called  Howard  at  7:00  p.m. 
and  cormected  for  about  thirty  seconds.  At  7:06  p.m.,  Cohen  called  Pecker  again  and  they  spoke 
for  nearly  thirteen  minutes.  At  7:24  p.m.,  Howard  sent  a  text  message  to  Cohen  that:  “He  said 
he’d  call  me  hack  in  20  minutes.  I  told  him  what  you  are  asking  for  his  [sic]  reasonable.  I’ll  get 
it  sorted.”  Approxiniately  an  hour  later,  at  8:23  p.m.,  Howard  told  Cohen  by  text  message  to 


“check  your  Gmad  for  email  from  my  private  account.”  In  an  email  sent  at  8:23  p.m.  by  Howard 
to  Cohen  and  Davidson,  with  the  subject  line  “Confirmation,”  Howard  stated,  “Thank  you  both 
for  chatting  with  me  earlier.  Confirming  agreement  on:  -  Executed  agreement,  hand-signed  by 
Keith’s  client  and  returned  via  overnight  or  same-day  FedEx  to  Michael,  -  Change  of  agreement 
to  reflect  the  correct  LLC,  -  Transfer  of  funds  on  Thursday  AM  to  be  held  in  escrow  until  receipt 
of  agreement.”  After  receiving  that  email,  at  approximately  8:27  p.m.,  Cohen  asked  Howard  by 
text  message,  “Can  you  and  David  [Pecker]  give  me  a  call.”  Howard  promptly  responded:  “David 
is  not  around  I  think.  I’ll  call.”  At  8:28  p.m.,  Howard  called  Cohen  and  they  spoke  for  three 
minutes. 
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22.  On  October  27, 201 6,  Cohen  made  a  payment  to  Davidson  of  $  1 30,000 — ^with  the  funds 
intended  for  Clifford — ^for  the  purpose  of  securing  her  ongoing  silence  with  respect  to  the 
allegations  that  she  had  an  extramarital  affair  with  Trump.  Specifically,  based  on  my  review  of 
toll  records,  bank  records,  and  information  obtained  pursuant  to  the  iCloud  Warrant  and  Cohen 
Email  Warrants,  I  have  learned  the  following: 

a.  At  9:47  a.m.,  Cohen  sent  Davidson  an  email,  stating:  “Keith,  kindly  confirm  that 
the  wire  received  today,  October  27,  2016  shall  be  held  by  you  in  your  attorney’s  trust  account 
until  such  time  as  directed  for  release  by  me,  in  writing.  Additionally,  please  ensure  that  all 
paperwork  contains  the  correct  name  of  Essential  Consultants  LLC.  I  thank  you  in  advance  for 
your  assistance  and  look  forward  to  hearing  from  you  later.” 

b.  At  approximately  10:01  a.m.,  according  to  records  provided  by  First  Republic 
Bank,  Cohen  completed  paperwork  to  wire  $130,000  from  the  Essential  Consultants  Account — 
which  had  been  funded  a  day  prior  from  Cohen’s  home  equity  line  of  credit — ^to  the  attorney  client 
trust  account  at  City  National  Bank  that  Davidson  had  specified  in  the  wiring  instructions  he  sent 
to  Cohen.  The  wire  transfer  was  made  shortly  thereafter. 

c.  At  10:02  a.m.,  Davidson  responded  to  Cohen’s  email  from  9:47  a.m.,  stating:  “I 
confirm  that  I  will  work  in  good  faith  &  that  no  funds  shall  be  disbursed  unless  &  until  the  plaintiff 
personally  signs  all  necessary  settlement  paperwork,  (the  form  of  which  will  match  the  prior 
agreement).  The  settlement  docs  will  name  the  correct  corporation,  (Essential  Consultants  LLC). 
Plaintiffs  signature  will  be  notarized  and  returned  to  you  via  FedEx.  Only  after  you  receive  FedEx 
will  1  disburse.  Fair?” 

d.  At  10:50  a.m..  First  Republic  Employee-1  sent  Cohen  an  email  confirming  that  the 
payment  had  been  sent  and  providing  him  with  the  wire  number. 
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23.  On  October  28,  2016,  and  the  days  that  followed,  Cohen  finalized  the  transaction  with 
Davidson.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the 
iCloud  Warrant,  public  sources,  and  bank  records,  I  know  the  following: 

a.  On  October  28,  201 6,  at  1 1 :48  a.m.,  Cohen  spoke  to  Trump  for  approximately  five 
minutes.  Begitming  at  1:21  p.m.,  Cohen  attempted  a  series  of  phone  calls  to  Davidson,  Pecker, 
and  Howard  throughout  the  day,  although  it  appears  he  may  only  have  connected  with  Howard. 

b.  Later  that  day,  at  approximately  7:01  p.m.,  Davidson  stated  to  Cohen  by  text 
message  that  “all  is  AOK.  I  should  have  signed,  notarized  docs  on  Monday.  You  should  have 
them  on  Tuesday.”  Cohen  thanked  him  and  said  “I  hope  we  are  good.”  Davidson  responded,  “I 
assure  you.  We  are  very  good.”  Howard  also  texted  Cohen  at  7:08  p.m.,  “Keith  [Davidson]  says 
we  are  good.”  Cohen  then  responded  “OK”  to  Howard  and  “Excellent”  to  Davidson.  At 
approximately  10:30  p.m.,  Cohen  spoke  to  Hicks  for  three  minutes. 

c.  On  October  31,  2016,  Cohen  called  Howard  at  8:22  p.m.  and  they  spoke  for  over 
three  minutes.  At  8:32  p.m.,  Cohen  received  text  messages  from  both  Howard  and  Davidson. 
Howard  said:  “You’ll  have  paperwork  tomorrow  says  KD.”  Davidson  said:  “We  are  AOK.  You 
will  be  receiving  a  package  tomorrow.”  Cohen  responded  “Thank  you”  to  Howard  and  “Thanks 
Keith.  Will  call  you  then”  to  Davidson.  From  my  involvement  in  this  investigation,  I  believe 
Davidson  was  referring  to  a  signed  nondisclosure  agreement  when  he  told  Cohen  that  he  would 
receive  a  package. 

d.  Based  on  my  review  of  court  filings  that  became  public  in  201 8, 1  have  learned  that 
On  or  about  October  28,  2016,  “EC,  EEC  and/or  David  Dennison”  entered  into  a  “confidential 
settlement  agreement  and  mutual  release”  with  “Peggy  Peterson,”  pursuant  to  which  “Peterson” 
agreed  not  to  disclose  certain  “confidential  information  pertaining  to  [Dennison]”  in  exchange  for 
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$  1 30,000.  The  agreement  provided  that  “EC,  LLC”  would  wire  the  funds  to  “Peterson’s”  attorney, 
who  would  then  transfer  funds  to  “Peterson.”  Cohen  signed  the  agreement  on  behalf  of  “EC, 
LLC.”  The  agreement  stated  that  the  address  for  “EC,  LLC,”  which  was  later  referred  to  in  the 
agreement  as  “Essential  Consultants,  LLC,”  was  Cohen’s  residence. 

e.  Consistent  with  the  “confidential  settlement  agreement  and  mutual  release,”  on  or 
about  November  1,  2016,  Davidson  transferred  $96,645  from  his  attorney  client  trust  account  at 
City  National  Bank  to  a  bank  account  in  Clifford’s  name.  The  wire  had  the  annotation  “net 
settlement.”  On  the  same  day,  at  approximately  9:48  a.m.  Davidson  sent  Cohen  a  text  message 
with  a  pictmre  of  a  FedEx  delivery  confirmation,  stating  that  at  approximately  9:09  a.m.  a  package 
shipped  by  Davidson  the  previous  day  had  arrived  for  Cohen  at  his  Trump  Organization 
address.  On  the  same  day,  at  approximately  6:14  p.m.,  Davidson  sent  Cohen  an  email  with  an 
audio  file  attached  and  said  “Give  this  a  lesson  [sic]  and  then  call  me.”  The  audio  attachment  was 
titled  “Stormy.mp3”  and  was  a  five-minute  recording  of  Davidson  interviewing  Clifford  about 
recent  public  allegations  made  by  an  adult  film  star  named  Jessica  Drake  regarding  her  alleged 
past  affair  with  Trump;  in  the  recording,  Clifford  explained  the  reasons  she  believed  that  Drake 
was  not  credible.  Less  than  an  hour  later,  at  approximately  7:05  p.m.,  Cohen  called  Trump,  but  it 
appears  that  they  did  not  connect.  Cohen  then  called  a  telephone  number  belonging  to  Kellyanne 
Conway,  who  at  the  time  was  Trump’s  campaign  manager.  They  did  not  connect.  At 
approximately  7:44  p.m.,  however,  Cohen  received  a  return  call  from  Conway,  which  lasted  for 
approximately  sbc  minutes. 

24.  On  November  4, 201 6,  just  three  days  after  the  Clifford  transaction  was  completed  and 
just  four  days  before  the  presidential  election,  the  Wall  Jbwraa/  pubhshed  an  article  alleging 
that  the  National  Enquirer  had  “Shielded  Donald  Trump”  from  allegations  by  Playboy  model 
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Karen  McDougal  that  she  and  Trump  had  an  affair.  The  article  alleged  that  AMI  had  agreed  to 
pay  McDougal  to  bury  her  story.  McDougal,  like  Clifford,  had  been  represented  by  Davidson. 
Based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen  Email  Warrants 
and  iCloud  Warrant,  and  public  sources,  it  appears  that  Cohen  spoke  frequently  to  Davidson, 
Howard,  Pecker,  and  Hicks  around  the  time  of  this  article’s  publication — -just  days  before  Election 
Day — ^about  the  importance  of  preventing  the  McDougal  and  Clifford  stories  from  gaining  national 
traction.  Specifically,  I  have  learned  the  following: 

a.  Between  4:30  and  8:00  p.m.  on  November  4,  Cohen  communicated  several  times 
with  Howard,  Pecker  and  Davidson.  For  instance,  at  approximately  4:49  p.m.,  Cohen  sent  Howard 
a  text  message  with  a  screenshot  of  an  email  forwarded  to  him  by  another  Trump  Organization 
lawyer.  The  forwarded  email  was  from  a  Wall  Street  Journal  reporter,  and  asked  for  comment 
from  Trump  and/or  the  campaign  on  the  story.  Cohen  also  spoke  with  Hicks  several  times, 
including  shortly  before  and/or  after  calls  with  Pecker,  Howard  and  Davidson.  Indeed,  at 
approximately  7:33  p.m.,  using  two  different  cellphones  subscribed  to  him,  Cohen  appears  to  have 
been  talking  to  Davidson  and  Hicks  at  the  same  time. 

b.  At  approximately  8:51  p.m.,  Cohen  sent  Howard  a  message,  stating:  “She’s  being 
really  difficult  with  giving  Keith  a  statement.  Basically  went  into  hiding  and  unreachable.”  One 
minute  later,  Howard  responded:  “I’ll  ask  him  again.  We  just  need  her  to  disappear.”  Cohen 
responded,  “She  definitely  disappeared  but  refuses  to  give  a  statement  and  Keith  cannot  push  her.” 
At  approximately  8:55  p.m.,  Howard  responded  to  Cohen’s  text:  “Let’s  let  the  dust  settle.  We  don’t 
want  to  push  her  over  the  edge.  She ’s  on  side  at  present  and  we  have  a  sohd  position  and  a  plausible 
position  that  she  is  rightfully  employed  as  a  columnist.”  Based  on  my  involvement  in  this 
investigation,  I  believe  Cohen  and  Howard  were  referring  to  Karen  McDougal  when  they  were 
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discussing  “she”  and  “her.”  Additionally,  I  believe  Howard’s  statement  that  “we  have  ...  a 
plausible  position  that  she  is  rightfully  employed  as  a  colmnnist”  was  a  referenee  to  the  fact  that 
AMI  had  given  MeDougal  payments  for  her  role  as  a  purported  columnist  for  the  eompany. 

e.  At  approximately  8:58  p.m.  on  November  4,  2016,  Howard  attempted  to  reassure 
Cohen  about  the  effect  of  the  forthcoming  Wall  Street  Journal  article,  texting,  “I  think  it’ll  be  ok 
pal.  I  think  it’ll  fade  into  the  distance.”  Cohen  responded,  “He’s  pissed.”  Howard  wrote  back, 
“I’m  pissed!  You’re  pissed.  Pecker  is  pissed.  Keith  is  pissed.  Not  much  we  can  do.”  Based  on 
my  involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  Trump  when  he  stated  “he’s 
pissed.”  Cohen  asked  Howard  at  approximately  9:00  p.m.  how  the  Wall  Street  Journal  could 
publish  its  article  if  “everyone  denies.”  Howard  responded,  “Because  there  is  the  payment  from 
AMI.  It  looks  suspicious  at  best.” 

d.  At  approximately  9:03  p.m.,  Hicks  called  Cohen  and  they  spoke  for  two  minutes. 
At  approximately  9:11  p.m.,  Cohen  called  Howard  and  spoke  to  him  for  five  minutes.  At 
approximately  9:15  p.m.,  Hicks  called  Cohen  and  they  spoke  for  nearly  seven  mmutes.  Again, 
Cohen  used  different  phones  for  these  two  calls,  such  that  he  appears  to  have  been  on  both  calls 
for  about  a  mmute  of  overlap.  At  approximately  9:32  p.m.,  Cohen  texted  Pecker,  “The  boss  just 
tried  callmg  you.  Are  you  free?”  A  minute  later,  Cohen  texted  Howard,  “Is  there  a  way  to  find 
David  quickly?” 

e.  At  approximately  9:50  p.m.,  the  Wall  Street  Journal  article  was  published  online. 
Howard  and  Hicks  both  sent  web  links  for  the  article  to  Cohen.  Over  the  next  half  hour,  Cohen 
and  Howard  exchanged  several  text  messages  commenting  on  how  the  story  came  across. 
The  next  morning  on  November  5, 2016,  at  approximately  7:35  a.m.,  Cohen  texted  Hicks,  “So  far 
I  see  only  6  stories.  Getting  little  to  no  traction.”  Hicks  responded,  “Same.  Keep  praying! !  It’s 
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working!”  Cohen  wrote  back,  “Even  CNN  not  talking  about  it.  No  one  believes  it  and  if  necessary, 
I  have  a  statement  by  Storm  denying  everything  and  contradicting  the  other  pom  stars  statement. 
I  wouldn’t  use  it  now  or  even  discuss  with  him  as  no  one  is  talking  about  this  or  cares!”  Based  on 
my  involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  the  above-referenced 
recorded  audio  statement  by  Clifford  that  he  obtained  from  Davidson,  and  was  stating  that  such  a 
statement  could  be  used  to  influence  potential  negative  media  relating  to  Trump,  but  was 
unnecessary  at  that  time.  Based  on  a  text  message  from  Hicks  to  Cohen,  I  believe  that  later  that 
morning.  Pecker  spoke  to  Trump. 

25.  On  or  about  November  8,  2016,  Tmmp  won  the  election  for  President  of  the  United 

States. 

26.  On  or  about  January  12,  2018,  the  Wall  Street  Journal  first  reported  that  Cohen 
arranged  a  payment  to  Clifford.  On  or  about  January  22,  2018,  Common  Cause,  a  government 
watchdog  group,  filed  a  complaint  with  the  Federal  Election  Commission,  alleging  that  Cohen  had 
violated  campaign  finance  laws  by  making  the  payment  to  Clifford.  Based  on  my  review  public 
sources  following  that  report,  as  well  as  emails  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
have  learned  the  following: 

a.  On  or  about  January  23,  2018,  the  day  after  Common  Cause  filed  its  complaint, 

Cohen  began  emailing  himself  drafts  of  statements  describing  his  payment  to  Clifford. 

Additionally,  on  January  23,  2018,  Cohen  emailed  the  following  draft  of  that  statement  to  an 

individual  who  appears  to  be  writing  a  book  on  Cohen’s  behalf: 

In  October  2016, 1  was  contacted  by  counsel  for  Ms.  Clifford  stating  that 
news  outlets,  including  ABC  news,  were  pursuing  the  2011  story  of  an 
alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.  Despite  the  fact  that 
both  parties  had  already  denied  the  allegation,  as  Mr.  Trump’s  longtime 
special  counsel  and  protector,  I  took  it  upon  myself  to  match  the  offer  and 
keep  the  story  from  breaking.  I  knew  the  allegation  to  be  false,  but  /  am 
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also  a  realist  who  understands  that  just  because  something  is  false  doesn  Y 
mean  that  it  doesn ’t  create  harm  and  damage.  I  could  not  allow  this  to 
occur.  I  negotiated  a  non-disclosnre  agreement  with  Ms.  Clifford’s 
eormsel  and  tendered  the  funds.  I  did  this  through  my  Delaware  LLC  and 
transferred  personal  funds  to  cover  the  agreement.  I  was  not  reimbursed 
any  monies  from  Mr.  Trump,  the  Trump  Organization,  any  third  party  or 
the  Presidential  campaign.  At  no  point  did  I  ever  advise  Mr.  Trump  of  my 
communications  or  actions  regarding  this  agreement.  As  outlandish  and 
unusual  as  this  may  appear,  the  Trumps  have  been  like  family  to  me  for 
over  a  decade.  It’s  what  you  do  for  family. 

(Emphasis  added.)  Based  on  my  involvement  in  this  investigation,  I  believe  that  the  above  email 
is  an  acknowledgement  that  the  allegation  of  the  affair  had  existed  for  some  time  C\..the  2011 
story. . .”),  but  that  Cohen  was  motivated  to  “keep  the  story  from  breaking”  again  in  October  201 6. 

b.  On  or  about  February  13,  2018,  Cohen  said  in  a  statement  to  The  New  York  Times 
that  “Neither  the  Trump  Organization  nor  the  Trump  campaign  was  a  party  to  the  transaction  with 
Ms.  Clifford.  The  payment  to  Ms.  Clifford  was  lawful,  and  was  not  a  campaign  contribution  or  a 
campaign  expenditure  by  anyone.”  Cohen  declined  to  answer  follow-up  questions  including 
whether  Trump  had  been  aware  of  the  payment,  why  Cohen  made  the  payment,  or  whether  similar 
payments  had  been  made  to  other  people. 

c.  On  or  about  February  14,  201 8,  Cohen  was  asked  by  The  New  York  Times  whether 
Trump  had  reimbursed  him,  whether  he  and  Trump  had  made  any  arrangement  at  the  time  of  the 
payment,  or  whether  he  had  made  payments  to  other  women.  Cohen  stated  in  response,  “I  can’t 
get  into  any  of  that.”  On  or  about  February  14,  201 8,  Cohen  also  stated  to  The  Washington  Post 
that:  “In  a  private  transaction  in  2016,  I  used  my  own  personal  funds  to  facilitate  a  payment  of 
$130,000  to  Ms.  Stephanie  Clifford.  Neither  the  Trump  Organization  nor  the  Tmmp  campaign 
was  a  party  to  the  transaction  with  Ms.  Clifford,  and  neither  reimbursed  me  for  the  payment,  either 
directly  or  indirectly.” 
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I 

I 

d.  On  or  about  March  9, 2018,  Cohen  stated  to  ABC  News  that  “the  funds  were  taken  I 

\ 

from  my  home  equity  line  and  transferred  internally  to  my  LLC  account  in  the  same  bank.”  j 

27.  For  the  foregoing  reasons,  there  is  probable  cause  to  believe  that  Cohen  used  the  Target 
Cellphones  to  commit  the  Subject  Offense.  Cohen  used  the  Target  Cellphones  to  communicate 
with  Davidson,  Howard,  Pecker,  and  others  about  the  payment  to  Clifford  on  the  eve  of  the 
election.  Indeed,  while  Cohen  denies  having  given  an  unlawful  contribution,  in  his  own  statements 
Cohenhas  admitted  that  he  paid  $130,000  ofhis  “personal  funds”  to  Clifford  and  that  the  payment  I 

occurred  less  than  two  weeks  before  the  election,  as  Trump  was  facing  negative  media  allegations  | 

about  his  behavior  toward  women,  even  though  allegations  of  an  affair  between  Trump  and 
Clifford  existed  since  2011.  In  addition,  the  communication  records  set  forth  above  make  evident  j 

that  Cohen  communicated — ^using  the  Target  Cellphones — ^with  members  of  the  Trump  campaign 
and  others  about  his  negotiation  with  Clifford’s  attorney  and  the  need  to  preclude  Clifford  from  1 

making  a  statement  that  would  have  reflected  negatively  on  the  candidate  in  advance  of  the  j 

forthcoming  election.  j 

28. 1  have  reviewed  records  maintained  by  AT&T,  from  which  I  have  learned,  in  substance 
and  in  part,  that  the  Target  Cellphones  are  still  active.  Based  on  my  training  and  experience,  my  J 

familiarity  with  this  investigation,  and  the  information  set  forth  above,  I  therefore  beheve  that  the  j 

Requested  Information  will  lead  to  evidence  of  the  Subject  Offense.  Specifically,  the  Requested  j 

Information  includes  historical  location  data  for  the  Target  Cellphones,  which  may  show  where  I 

the  Target  Cellphones — and  by  extension  Cohen — rwas  on  particular  dates  and  times  between  j 

October  1 ,  20 1 6 — ^the  approximate  time  that  negotiations  regarding  the  Clifford  payment  began — 
and  the  present.  That  location  information  can,  among  other  things,  be  used  to  corroborate  any  in- 
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person  meetings  between  the  Cohen  and  the  other  individuals  involved  in  the  negotiations  of  the 
the  payment  to  Clifford. 

29.  Based  on  my  training  and  experience,  I  also  know  that  historical  location  information 
can  be  useful  to  establish  a  pattern  of  behavior  by  a  particular  individual,  which  assists  law 
enforcement  in  tracking  such  an  individual — and,  thereby,  locating  his  electronic  devices.  Along 
with  the  historical  mformation,  the  prospective  information  will  also  lead  to  the  present  location 
of  the  Target  Cellphones;  law  enforcement  may  then  obtain  evidence  from  the  Target  Cellphones, 
by  subpoena  or  search  warrant,  including  but  not  limited  to  contact  lists  containing  contact 
information  for  participants  in  the  illegal  campaign  contribution  scheme  and  well  as  text  messages 
between  these  participants. 

III.  Request  for  Warrant  and  Order 

30.  Based  on  the  foregoing  I  respectfully  request  that  the  Court  require  the  Service  Provider 

to  provide  the  Requested  Information  as  specified  further  in  the  Warrant  and  Order  proposed 

herewith,  including  prospective  precision  location  and  cell  site  data  for  a  period  of  45  days  from 

the  date  of  this  Order  (or  the  date  that  the  Target  Cellphones  are  seized,  whichever  comes  first), 

historical  ceU  site  data  and  toll  records  for  the  period  from  October  1,  2016  through  the-date-offijis 

/  tol  ^ 

0rd^,  and  pen  register  information  for  a  period  of  60  days  from  the  date  of  this  Order.  ^  r€t<^  f 

31.  Nondisclosure.  The  existence  and  scope  of  this  ongoing  criminal  investigation  are  not 
publicly  known.  As  a  result,  premature  public  disclosure  of  this  affidavit  or  the  requested  Warraiit 
and  Order  could  alert  potential  criminal  targets  that  they  are  under  investigation,  causmg  them  to 
destroy  evidence,  flee  from  prosecution,  or  otherwise  seriously  jeopardize  the  investigation. 
Accordingly,  I  respectfully  request  that  the  Provider  be  directed  not  to  notify  the  subscriber  or 
others  of  the  existence  of  the  Warrant  and  Order  for  a  period  of  1 80  days,  and  that  the  Warrant  and 


2018-04-07017.02.09 


25 


Case  l:18-cr-00602-WHP  Document  48-7  Filed  07/18/19  Page  38  of  38 


Order  and  all  supporting  papers  be  maintained  under  seal  until  the  Court  orders  otherwise,  as 
specified  in  the  Application  submitted  in  conjimction  with  this  Affidavit. 


United  States  Attorney’s  Office 
Southern  District  of  New  York 


Sworn  to  before  njclhis 

7lhjlaypfj^ipfiy2fi 


HONOI^Lfi  HENRY  PITMAN 
United  States  Magistrate  Judge 
Southerp  District  of  New  York 
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IN  THE  UNITED  STATES  DISTRICT  COURT 
FOR  THE  SOUTHERN  DISTRICT  OF  NEW  YORK 


IN  THE  MATTER  OF  THE  USE  OF  A  CELL- 
SITE  SIMULATOR  TO  LOCATE  THE 
CELLULAR  DEVICES  ASSIGNED  CALL 
NUMBERS  AND 


l-8MA6-gS74 

Filed  Under  Seal 


AFFIDAVIT  IN  SUPPORT  OF 
AN  APPLICATION  FOR  A  SEARCH  WARRANT 


being  first  duly  sworn,  hereby  depose  and  state  as  follows: 


INTRODUCTION  AND  AGENT  BACKGROUND 


1.  I  make  this  affidavit  in  support  of  an  application  for  a  search  warrant  mider 

Federal  Rule  of  Criminal  Procedure  41  to  authorize  law  enforcement  to  employ  an  electronic 
investigative  technique,  which  is  described  in  Attachment  B,  to  determine  the  location  of  the 
cellular  devices  assigned  call  numbers  m|m|||||||  (the  “Target  Cellular 

Devices”),  which  ai-e  described  in  Attachment  A. 

2.  I  am  a  Special  Agent  with  the  Federal  Bureau  of  Investigation  (‘TBI”).  I 
have  been  a  Special  Agent  with  the  FBI  since  2009.  In  the  course  of  my  experience  and  training 
in  these  positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a 
wide  array  of  financial  crimes,  including  offenses  involving  public  corruption.  I  also  have 
training  and  experience  executing  warrants  for  cellphone  location  data 

3.  The  facts  in  this  affidavit  come  horn  my  personal  observations,  my  training  and 
experience,  and  information  obtained  from  other  agents  and  witnesses.  This  affidavit  is  intended 
to  show  merely  that  there  is  sufficient  probable  cause,  for  the  requested  warrant  and  does  not  set 
forth  all  of  my  knowledge  about  this  matter. 


I 

I- 

|- 
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4.  One  purpose  of  applying  for  this  warrant  is  to  determine  with  precision  the  Target 
Cellular  Devices’  location.  However,  there  is  reason  to  believe  the  Target  Cellular  Devices  are 
currently  located  somewhere  within  this  district  because  the  Target  Cellulai'  Devices’  owner  is 
known  to  spend  most  of  his  time  in  this  district.  Pursuant  to  Rule  4 1  (b)(2),  law  enforcement  may 
locate  the  Target  Cellular  Devices  outside  the  district  provided  the  device  is  within  the  district 
when  the  warrant  is  issued. 

5.  Based  on  the  facts  set  forth  in  this  affidavit,  there  is  probable  cause  to  believe  that 
violations  of  52  U.S.C.  §§  301 16(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions) 
(the  “Subject  Offense”)  has  been  committed,  are  being  committed,  and  will  be  committed  by 
Michael  Cohen  and  others.  There  is  also  probable  cause  to  believe  that  the  location  of  the  Target 
Cellular  Devices  will  lead  to  evidence  of  the  Subject  Offense,  as  detailed  below. 

6.  Because  collecting  the  information  authorized  by  this  warrant  may  fall  within  the 
statutory  definitions  of  a  “pen  register”  or  a  “trap  and  trace  device,”  see  18  U.S.C.  §  3127(3)  & 
(4),  this  warrant  is  designed  to  comply  with  the  Pen  Register  Statute  as  well  as  Rule  41.  See  18 
U.S.C.  §§  3121-3127.  This  warrant  therefore  includes  all  the  information  required  to  be  included 
in  a  pen  register  order.  See  18  U.S.C.  §  3 123(b)(1). 

PROBABLE  CAUSE 
Introduction 

7.  The  United  States  Attorney’s  Office  for  the  Southern  District  of  New  York 

(“USAO”)  and  the  FBI  are  investigating  a  criminal  violation  of  the  campaign  finance  laws  by 

Michael  Cohen,  a  lawyer  who  holds  himself  out  as  the  personal  attorney  for  President  Donald  J. 

Trump.  As  detailed  below,  there  is  probable  cause  to  believe  that  Cohen  made  an  excessive  in- 

kind  contribution  to  the  presidential  election  campaign  of  then-candidate  Donald  Tramp  in  the 
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form  of  a  $130,000  payment  to  Stephanie  Clifford,  an  individual  who  is  alleged  to  have  had  an 
extramarital  affair  with  Trump,  in  exchange  for  her  agreement  not  to  disclose  that  alleged  affair 
on  the  eve  of  the  2016  presidential  election. 

8.  The  Target  Cellular  Devices  referenced  in  this  Affidavit  are  the  cellphones 

assigned  eall  numbers^^^^^^^and  As  further  discussed  below,  the  Target 

Cellular  Devices  are  subscribed  to  in  the  name  of  Michael  Cohen  (the  “Subscriber”).  The 
Subscriber  is  belieyed  to  use  the  Target  Cellphones  and  is  a  Target  Subject  of  this  investigation. 
AT&T  is  the  Seiwice  Provider  for  the  Target  Cellphones. 

Prior  Relevant  Process 

9.  In  connection  with  an  hivestigation  then  being  conducted  by  the  Office  of 
the  Special  Counsel  (“SCO”),  the  FBI  sought  and  obtained  from  the  Honorable  Beryl  A.  HoweU, 
Chief  United  States  District  Judge  for  the  District  of  Columbia,  three  search  warrants  for  emails 
and  other  content  information  associated  with  two  email  accounts  used  by  Cohen,  and  one  search 
warrant  for  stored  content  associated  with  an  iCloud  account  used  by  Cohen.  Specifically: 

a.  On  or  about  July  1 8, 20 1 7,  the  FBI  sought  and  obtained  a  search  warrant  for  emails 
in  the  accoun^^^^^^^J^gmail.com  (the  “Cohen  Gmail  Account”)  sent  or  received  between 
January  1,  2016  and  July  18,  2017  (the  “First  Cohen  Gmail  Warrant”). 

b.  On  or  about  August  8,  2017,  the  FBI  sought  and  obtained  a  search  warrant  for 
content  stored  in  the  iCloud  account  associated  with  Apple  ID  ^^^^^|@gmail.com  (the 
“Cohen  iCloud  Accounf  ’  and  the  “Cohen  iCloud  Warrant”). 

c.  On  or  about  November  1 3 ,  20 1 7,  the  FBI  sought  and  obtained  a  search  warrant  for 
emails  in  the  Cohen  Gmail  Account  sent  or  received  between  June  1,2015  and  November  13,2017 
(the  “Second  Cohen  Gmail  Warrant”). 
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d.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  search  warrant  for 
emails  in  the  account  “Cohen  MDCPC  Account”)  sent  or  received 

between  the  opening  of  the  Cohen  MDCPC  Account^  and  November  13,  2017  (the  “First  Cohen 
MDCPC  Warranf’). 

10.  The  SCO  has  since  referred  certain  aspects  of  its  investigation  into  Cohen 
to  the  USAO,  which  is  working  with  the  FBFs  New  York  Field  Office. 

11.  On  or  about  February  28,  2018,  the  USAO  and  FBI  sought  and  obtained 

search  warrants  for  emails  in  Cohen  Gmail  Account  and  Cohen  MDCPC  Account,  among  other 
accoimts,  sent  or  received  between  November  14,  2017  and  February  28,  2018  (the  “Third  Cohen 
Gmail  Warrant”  and  “Second  Cohen  MDCPC  Warrant”).^ 

12.  The  above-described  waiTants  ai'e  referred  to  herein  as  the  “Cohen  Emails 
Warrants”  and,  with  respect  to  the  iCloud  Warrant,  the  “Cohen  iCloud  Warrant.” 

The  Illegal  Campaign  Contributiom  Scheme 

13.  From  my  review  of  public  sources,  I  have  learned  the  following: 

a.  In  or  around  October  2011,  there  were  rumors  published  on  the  gossip  website 
TheDirty.com  that  Trump  had  had  an  extramarital  affair  with  Clifford,  an  adult  film  actress  whose 
screen  name  is  Stormy  Daniels,  in  or  around  July  2006.  In  or  about  October  2011,  Life  &  Style 


'  Based  on  my  review  of  this  warrant  and  the  affidavit  in  support  of  it,  I  Icnow  that  the  warrant  did 
not  specify  a  time  period,  but  the  affidavit  indicated  that,  pursuant  to  court  order,  the  service 
provider  had  provided  non-content  information  for  the  Cohen  MDCPC  Account  that  indicated  that 
the  account  contained  emails  fi'om  the  approximate  period  of  March  2017  through  the  date  of  the 
warrant. 

^  On  or  about  February  28, 2018  and  April  7,  2018,  the  USAO  and  FBI  sought  and  obtained  Rule 
41  search  warrants  authorizing  the  search  of  emails  and  content  obtained  pursuant  to  previously 
issued  warrants  for  additional  subject  offenses. 
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Magazine,  a  tabloid  sold  in  supermarkets,  also  published  an  article,  based  on  the  report  in 
TheDirty.com,  alleging  an  affair  had  occurred  between  Trump  and  Clifford.  Both  Trump  and 
Clifford,  through  their  representatives,  issued  denials  in  response  to  the  articles. 

b.  Specifically,  on  or  about  October  11,2011,  Keith  Davidson,  who  identified  himself 
as  Clifford’s  attorney,  sent  a  cease  and  desist  letter  to  TheDirty.com,  demanding  that  the  article 
regarding  Trump  and  Clifford  be  removed  from  the  website.  Additionally,  on  or  about  October 
12,  2011,  Cohen,  who  was  then  Executive  Vice-President  and  Special  Counsel  to  the  Trump 

Organization,  stated  to  E!  News  that  “[t]he  totally  mitrue  and  ridiculous  story  . . .  emanated  JBrom 

a  sleazy  and  disgusting  website _ The  Trump  Organization  and  Donald  J.  Trump  will  be  bringing 

a  lawsuit .  .  .  [and]  Mr.  Trump  and  the  Trump  Oi'ganization  would  like  to  thank  and  commend 
Stormy  Daniels  and  her  attorneys  for  their  honesty  and  swift  actions.” 

14.  On  or  about  June  16,  2015,  Trump  formally  launched  his  2016  presidential 
campaign.  On  or  about  May  4,  20 1 6,  Trump  became  the  presumptive  Republican  Party  nominee 
for  president,  and  on  July  1 9,  20 1 6,  Trump  officially  became  the  nominee.  Based  on  my  review 
of  public  sources,  I  have  learned  that  while  it  does  not  appear  that  Cohen  had  an  official  title  as 
part  of  the  Trump  campaign,  on  multiple  occasions  Cohen  made  public  statements  on  behalf  of 
Tmmp  or  his  campaign.  For  instance,  on  or  about  August  1 8,  2016,  Cohen  appeared  on  CNN  to 
defend  Trump’s  polling  numbers. 

15.  On  or  about  October  7, 2016,  The  jras/z/ngton  published  online  a  video 

and  accompanying  audio  in  which  Trump  referred  to  women  hi  what  the  aiticle  described  as 

“vulgar  terms”  in  a  2005  conversation  with  Billy  Bush,  who  was  then  the  host  of  Access 

Hollywood.  The  following  day,  on  October  8,  2016,  Trump  appeared  in  a  video  in  which  he 

stated,  among  other  things,  “I’ve  said  and  done  things  I  regret  and  words  released  today  on  this 
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more  than  a  decade  old  video  are  one  of  them.  Anyone  who  Icnows  me  loiows  these  words  don’t 
reflect  who  I  am.  I  said  it.  I  was  wrong  and  I  apologize.”  Based  on  my  review  of  public 
sources,  I  also  know  that  representatives  of  the  Tnimp  Campaign  stated,  in  sum  and  substance, 
that  the  Access  Hollywood  comment  was  an  old  and  isolated  incident. 

16.  Based  on  my  review  of  public  sources,  includmg  an  article  published  in 
Slate  magazine  by  a  reporter  who  interviewed  Clifford,  that  around  this  same  time,  in  or  about 
October  2016,  Clifford  was  in  discussions  with  ABC's  Good  Morning  America  show  and  Slate 
magazine,  among  other  media  sources,  to  provide  these  media  outlets  with  her  statement  about  her 
alleged  relationship  with  Trump.  According  to  the  article  in  Slate,  which  the  author  based  on 
conversations  with  Clifford  over  the  telephone  and  by  text  message,  Clifford  wanted  to  be  paid  for 
her  story  or  be  paid  by  Trump  not  to  disclose  her  accusation.  As  Cohen  summarized  in  a  2018 
email  obtained  pursuant  to  the  Cohen  Email  Warrants:  “In  October  2016,  I  was  contacted  by 
counsel  for  Ms.  CUfford  stating  that  news  outlets,  including  ABC  News,  were  pursuing  the  2011 
story  of  an  alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.” 

17.  From  my  review  of  telephone  toll  records^  and  information  produced 
pursuant  to  the  iCloud  Warrant  and  Cohen  Email  Warrants,  I  have  learned  that  in  the  days 
following  the  Access  Hollywood  video,  Cohen  exchanged  a  series  of  calls,  text  messages,  and 
emails  with  Keith  Davidson,  who  was  then  Clifford’s  attorney,  David  Pecker  and  Dylan  Howard 


^  My  attribution  of  certain  telephone  numbers  to  certain  individuals  as  described  in  this 
affidavit  is  based  on  my  review  of  the  vCard  (virtual  contact  file)  and  text  messages  obtained  from 
Cohen’s  telephone  pursuant  to  the  iCloud  Warrant. 
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of  American  Media,  Inc.  (“AMI”),  the  publisher  of  the  National  Enquirer,^  Trump,  and  Hope 
Hicks,  who  was  then  press  secretaiy  for  Trump  ’  s  presidential  campaign.  For  these  text  messages 
and  calls — ^as  well  as  all  of  the  text  messages  and  calls  referenced  in  this  affidavit  involving 
Cohen — Cohen  used  one  of  the  Target  Cellular  Devices  for  the  communication. 

18.  Based  on  the  timing  of  the  calls  in  the  days  following  tlie  Access  Hollywood 
stoiy,  and  the  content  of  the  text  messages  and  emails,  I  believe  that  at  least  some  of  these 
communications  concerned  the  need  to  prevent  Clifford  from  going  public,  particularly  in  the  wake 
of  the  Access  Hollywood  stoiy.  In  particular,  I  have  learned  the  following: 

a.  On  October  8, 20 1 6,  at  approximately  7 :20  p.m.,  Cohen  received  a  call  from  Hicks. 
Sixteen  seconds  into  the  call.  Trump  joined  the  call,  and  the  call  continued  for  over  four  minutes.^ 
Based  on  the  toll  records  that  the  USAO  has  obtained  to  date,  I  believe  that  this  was  the  first  call 
Cohen  had  received  or  made  to  Hicks  in  at  least  multiple  weeks,  and  that  Cohen  and  Trump  spoke 
on  the  telephone  about  once  a  month  prior  to  this  date  -  specifically,  prior  to  this  call  on  October 


Pecker  is  President  of  AMI  and,  according  to  his  ovm  statements  in  public  reports,  a  personal 
friend  of  Trump.  Howard  is  the  chief  content  officer  of  AMI,  who  according  to  public  records 
reports  directly  to  Pecker. 

^  I  believe  that  Trump  joined  the  call  between  Cohen  and  Hicks  based  on  my  review  of  toll 
records.  Specifically,  I  loiow  that  a  call  was  initiated  between  Cohen’s  telephone  number  and 
Trump’s  telephone  number  at  the  same  time  the  records  indicate  that  Cohen  was  talking  to  Hides. 
After  the  Cohen-Trump  call  was  initiated,  it  lasted  the  same  period  of  time  as  the  Cohen-Hicks 
call.  Additionally,  the  toll  records  indicate  a  “-1”  and  then  Trump’s  telephone  number,  which, 
based  on  my  training  and  experience,  means  that  the  call  was  either  transferred  to  Trump,  or  that 
Tmmp  was  added  to  the  call  as  a  conference  or  three-way  call  participant.  In  addition,  based  on 
my  conversations  with  another  law  enforcement  agent  who  has  spoken  to  a  law  enforcement  agent 
who  has  interviewed  Hicks,  I  have  learned  that  Hicks  stated,  in  substance,  to  the  best  of  her 
recollection,  she  did  not  learn  about  the  allegations  made  by  Clifford  until  early  November  2016. 
Hicks  was  not  specifically  asked  about  this  three-way  call. 
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8,  2016,  Cohen  and  Trump  had  spoken  once  m  May,  once  in  June,  once  in  July,  zero  times  in 
August,  and  twice  in  September. 

b.  Approximately  ten  minutes  after  the  call  ended,  Hicks  and  Cohen  spoke  again  for 
about  two  minutes. 

c.  At  7:39  p.m.,  immediately  after  the  second  call  with  Hicks  ended,  Cohen  called 
David  Pecker  (as  noted  above,  the  President  of  American  Media  Inc.,  or  AMI)  and  they  connected 
for  thirty  seconds.  Approximately  four  minutes  later,  Cohen  called  Pecker  again^and  they  spoke 
for  more  than  a  minute.  Three  minutes  after  ending  his  call  with  Pecker,  Cohen  received  a  call 
from  Dylan  Howard  (as  noted  above,  the  Chief  Content  Officer  of  AMI),  and  they  spoke  for 
approximately  a  minute.  According  to  toll  records,  it  does  not  appear  that  Cohen  and  Howard 
spoke  regularly  prior  to  October  8,  2016,  as  it  had  been  over  a  month  since  they  had  called  each 
other. 

d.  At  7:56  p.m.,  approximately  eight  minutes  after  his  call  with  Howard  ended,  Cohen 
called  Hicks  and  they  connected  for  two  minutes.  At  approximately  the  same  time  this  call  ended, 
Cohen  received  a  call  from  Pecker,  and  they  spoke  for  about  two  minutes.  At  8:03  p.m.,  about 
three  minutes  after  ending  his  call  with  Pecker,  Cohen  called  Trump,  and  they  spoke  for  nearly 
eight  minutes. 

e.  At  8:39  p.m.  and  8:57  p.m.,  Cohen  received  calls  from  Howard  and  spoke  to  him 
for  about  four  and  six  minutes,  respectively.  At  9:13  p.m.,  about  ten  minutes  after  Cohen  and 
Howard  hung  up  from  the  second  of  these  calls,  Howard  sent  Cohen  a  text  message  that  said: 
“Keith  will  do  it.  Let’s  reconvene  tomorrow.”  Based  on  my  involvement  in  this  investigation,  I 
believe  that  when  Howard  wrote  “Keith,”  he  was  referring  to  Keith  Davidson,  the  attorney  for 
Stephanie  Clifford.  At  3 :3 1  a.m.,  now  on  October  9,  20 1 6,  Cohen  sent  Howard  a  text  message  in 
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response  that  said:  “Thank  you.”  Eight  minutes  later,  Cohen  sent  Howard  a  text  message  that 

said:  “Resolution  Consultants  LLC.  is  the  name  of  the  entity  I  formed  a  week  ago.  Whenever  you  : 

wake,  please  call  my  cell.” 

f.  The  following  day,  on  October  10, 2016,  at  10:58  a.m.,  Howard  sent  atext  message 

to  Cohen  and  Davidson,  which  stated:  “Keith/Michael:  connecting  you  both  in  regai'ds  to  that 
business  opportunity.  Spoke  to  the  client  this  AM  and  they’re  confirmed  to  proceed  with  the 
nppnrhmity-Thank.s.  Dylan.  Over  to  you  two.”  At  12:25  p.m.,  Davidson  sent  Cohen  a  text   -  -  1 

message  that  stated:  “Michael  -  if  we  are  ever  going  to  close  this  deal  —  In  my  opinion,  it  needs  to 
he  today.  Keith.”  Davidson  and  Cohen  then  spoke  by  phone  for  about  three  minutes.  Based  on 
my  participation  in  this  investigation,  I  believe  that  when  Howard  wrote  that  the  “client”  was  ^ 

“confirmed  to  proceed  with  the  opportunity,”  he  was  referring  to  Clifford’s  agreement  in  principle  | 

to  accept  money  from  Cohen  in  exchange  for  her  agreement  not  to  discuss  any  prior  affair  with  j 

then-candidate  Trump.^  j 

g.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  Warrants,  I  j 

know  that  on  or  about  October  1 0, 20 1 6,  Clifford  and  Davidson  appear  to  have  signed  a  “side  letter  j 

agreement”  that  stated  it  was  an  exhibit  to  a  “confidential  settlement  agreement  and  mutual  j 

release”  between  “Peggy  Peterson”  and  “David  Dennison.”  The  purpose  of  the  document,  | 

according  to  the  agreement,  was  to  define  the  “true  name  and  identity”  of  persons  named  by  j 


^  As  set  forth  below,  AMI  was  also  involved  in  a  payment  to  model  Karen  McDougal. 
However,  because  these  communications  were  in  close  temporal  proxunity  to  the  events  involving 
the  negotiation  of  a  payment  to  Clifford,  the  execution  of  the  agreement  with  Clifford,  and  the 
payment  of  money  to  Clifford,  I  believe  that  these  communications  were  related  to  CUfford. 
Additionally,  based  on  my  review  of  public  statements  by  McDougal,  I  have  learned  that  she 
negotiated  an  agreement  with  AMI  several  months  prior  to  these  communications  between  Cohen 
and  Pecker,  Howard,  and  Davidson. 
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pseudonym  in  “confidential  settlement  agieement  and  mutual  release.”  The  side  letter  agreement 
specifies  the  identity  of  “Peggy  Peterson”  to  be  Clifford,  but  the  space  for  “Dennison’s”  identity 
is  blank.  The  agreement  also  includes  a  signature  page  for  “Peterson,”  “Dennison,”  and  their 
attorneys.  The  signature  page  is  signed  by  “Peterson”  and  his  attorney,  Davidson,  but  the 
document  is  unsigned  by  “Dennison”  and  his  attorney.  Based  on  my  involvement  in  this 
investigation,  I  believe  that  Davidson  sent  Cohen  this  partially-signed  “side  letter  agreement”  in 
order  to  facilitate  the  closing  of  a  deal  between  Davidson’s  client  and  Cohen  or  his  client  on 
October  10, 2016. 

19.  It  appears  that  on  October  13, 2016,  and  the  days  that  followed,  Cohen  took 
steps  to  complete  a  transaction  with  Davidson,  including  attempting  to  open  an  account  from  which 
Cohen  could  transfer  funds  to  Davidson.  Specifically,  from  my  review  of  toll  records, 
information  obtained  pursuant  to  the  iCloud  Warrant  and  Cohen  Email  Warrants,  records 
maintained  by  First  Republic  Bank  (“First  Republic”),  as  well  as  my  participation  in  interviews 
with  employees  of  First  Republic,  I  have  learned  the  following: 

a.  On  the  morning  of  October  13, 2016,  at  8:54  a.m.,  Cohen  sent  Pecker  a  text  message 
that  stated:  “I  need  to  talk  to  you.”  At  9:06  a.m..  Pecker  sent  a  text  message  to  Cohen  that  stated, 
“I  called  please  call  me  back.”  The  tolls  between  Cohen  and  Pecker  do  not  show  a  telephone  call 
between  8:54  a.m.  and  9:06  a.m.  However,  based  on  my  review  of  text  messages,  I  have  learned 
that  Cohen  and  Pecker  communicate  with  each  otlrer  over  Signal,  which  is  an  encrypted 
communications  cellphone  application  that  allows  users  to  send  encrypted  text  messages  and  make 
encr5T3ted  calls. 

b.  At  9:23  a.m.,  Cohen  sent  an  email  that  stated  “call  me”  to  a  banker  at  First  Republic 
Bank  (“First  Republic  Employee-2”).  The  email  attached  documents  from  the  Secretary  of  State 
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of  Delaware  indicating  that  Cohen  had  formed  a  limited  liability  company  called  “Resolution 
Consultants  LLC”  on  September  30, 2016.  As  noted  above,  “Resolution  Consultants”  is  the  name 
of  the  entity  that  Cohen  had  told  Howard  he  had  fonned  recently  after  Howard  said  Davidson 
would  “do  it.”  At  10:44  a.m.,  Cohen  called  First  Republic  Employee-2  and  told  him,  in  sum  and 
substance,  that  he  needed  an  account  in  the  name  of  “Resolution  Consultants”  opened  immediately, 
and  that  he  did  not  want  an  address  on  the  checks  written  out  of  die  account.  Later  that  day, 
another  employee  at  First  Republic  emailed  Cohen  account  opening  paperwork  to  complete. 
Cohen  returned  the  account  opening  documents  partially  completed,  but  failed  to  provide  a  copy 
of  his  driver’s  license  or  passport,  and  did  not  respond  to  the  employee’s  question  of  how  he 
wanted  to  ftmd  the  account.  As  a  result,  the  account  was  never  opened. 

c.  On  October  1 7, 2016,  Cohen  incorporated  Essential  Consultants  LLC  in  Delaware. 
That  same  day,  he  filed  paperwork  to  dissolve  Resolution  Consultants  LLC. 

20.  Despite  these  steps  taken  by  Cohen,  it  appears  that  the  negotiation  between 
Cohen  and  Davidson  was  not  progressing  sufficiently  fast  enough  for  Davidson  or  his  client, 
Clifford,  and  they  threatened  to  go  public  with  Clifford’s  allegations  just  days  before  the 
presidential  election.  Specifically,  based  on  my  review  of  toll  records,  information  obtained 
pursuant  to  the  iCloud  Warrant,  and  public  sources,  I  Icnow  the  following: 

a.  According  to  an  article  in  The  Washington  Post,  which  quoted  emails  sent  from 
Cohen’s  email  account  hosted  by  the  Trump  Organization,  on  October  17, 2016,  Davidson  emailed 
Cohen  and  threatened  to  cancel  the  aforementioned  “settlement  agreement”  by  the  end  of  the  day 
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if  Cohen  did  not  complete  the  transaction^  According  to  the  article,  Davidson  sent  Cohen  a 
second  email  later  in  the  day  that  stated  in  part,  “Please  be  advised  that  my  client  deems  her 
settlement  agreement  canceled  and  void.”  At  4:00  p.m.  that  day,  Cohen  called  Davidson  and  they 
spoke  for  over  five  minutes. 

b.  Cohen’s  4:00  p.m.  call  with  Davidson  and/or  Davidson’s  threats  to  cancel  the 
“settlement  agreement”  appear  to  have  touched  off  a  fluiTy  of  communications  about  the  settlement 
agreement  and  whether  Clifford  would  go  public.  Specifically: . .  . 

i.  At  4:43  p.m.,  Howard  sent  Cohen  a  text  message  that  stated:  “I’m  told 
they’re  going  with  DailyMail.  Are  you  awai-e?”  One  minute  later,  Cohen  responded:  “Call  me.” 
Based  on  my  involvement  in  this  investigation,  I  understand  Howard’s  text  to  mean  that  he  heard 
that  Clifford  was  going  to  take  her  story  of  an  exti'amarital  affair  with  Tmmp  to  the  Daily  Mail,  a 
tabloid  newspaper. 

ii.  At  4:45  p.m.,  Howai-d  called  Cohen  and  they  spoke  for  over  two  minutes. 
Moments  later,  Davidson  and  Cohen  spoke  for  about  two  minutes. 

iii.  At  5 :03  p.m.,  Cohen  attempted  to  call  Trump,  but  the  call  only  lasted  eight 
seconds.  This  was  Cohen’s  first  call  after  he  spoke  with  Davidson. 

iv.  At  5:25  p.m.,  Cohen  texted  Howard,  stating:  “Well???” 

V.  At  6:44  p.m.,  Howard  responded  to  Cohen’s  text,  stating:  “Not  taking  my 

calls.”  Cohen  responded  one  minute  later:  “You’re  kidding.  Who  are  you  trying  to  reach?” 
Howard  responded  one  minute  later:  “The  ‘agent.’”  Based  on  my  involvement  in  this 


^  Due  to  the  partially  covert  nature  of  the  investigation  to  this  date,  the  USAO  has  not  requested 
documents  from  the  Trump  Organization  or  Davidson,  and  thus  does  not  possess  the  email 
referenced  in  this  article. 
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investigation,  I  understand  Howar  d’s  text  messages  to  mean  that  he  attempted  to  contact  Davidson 
about  the  matter  involving  Clifford,  but  that  Davidson  was  not  talcing  Howard’s  calls. 

vi.  At  6:49  p.m.,  Cohen  called  Howard  and  they  spoke  for  nearly  four  minutes. 

c.  The  following  day,  on  October  18,  2016,  TheSmokingGun.com,  a  website  that 
publishes  legal  documents  and  mugshots,  published  an  article  called:  “Donald  Tiaimp  and  the  Pom 
Superstar,”  which  alleged  that  Trump  had  an  extramarital  affair-  with  Clifford.  However,  the 
article  noted  that  Clifford  had  declined  to  comment.  

21.  On  or  about  October  25,  2016,  the  communications  between  Cohen, 
Davidson,  Howard  and  Pecker  picked  up  again,  apparently  concerning  a  transaction  involving 
Clifford.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the 
Cohen  Email  Warrants  and  iCloud  Warrant,  as  well  as  my  review  of  public  sources,  I  have  learned 
the  following: 

a.  On  October  25,  2016,  at  6:09  p.m.,  Howai-d  sent  Cohen  a  text  message  stating: 
“Keith  calling  you  urgently.  We  have  to  coordinate  something  on  the  matter  he’s  calling  you  about 
or  its  [sic]  could  look  awfully  bad  for  everyone.”  One  minute  later,  Davidson  sent  Cohen  a  text 
message  stating  “Call  me.”  Cohen  and  Davidson  called  each  other  several  times  over  the  next 
half  hour  but  appear  not  to  have  connected.  At  6:42  p.m.,  Cohen  and  Davidson  spoke  for  about 
eight  minutes.  At  7: 1 1  p.m.,  they  spoke  for  another  two  minutes. 

b.  The  next  morning,  on  or  about  October  26,  2016,  at  8:26  a.m.,  Cohen  called  Tmmp 
and  spoke  to  him  for  approximately  three  minutes.  At  8:34  a.m.,  Cohen  called  Trump  again  and 
connected  for  a  minute  and  a  half. 

c.  At  approximately  9:04  a.m. — less  than  thirty  minutes  after  speaking  with  Tmmp^ — 

Cohen  sent  two  emails  to  the  person  who  had  incorporated  Resolution  Consultants  and  Essential 
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Consultants  for  him,  and  stated  “can  you  send  me  asap  the  filing  receipt”  and  then,  in  the  second 
email,  “for  Essential  Consultants  LLC.”  That  person  responded  with  the  filing  receipt  two 
minutes  later  at  9:06  a.m.  and  with  the  certification  of  fonnation  23  minutes  later,  at  9:27  a.m. 

d.  Shortly  after  that,  Cohen  contacted  a  particular  employee  at  First  Republic  (“First 
Republic  Employee-2”)  and  told  hhn,  in  sum  and  substance,  that  he  decided  not  to  open  an  account 
in  the  name  of  “Resolution  Consulting”  and  instead  would  be  opening  a  real  estate  consulting 
company  in  the  name  of  “Essential  Consultants.”  Cohen  told  First  Republic  Employee-2  that  he 

was  at  Trump  Tower,  and  wanted  to  go  to  a  First  Republic  branch  across  the  street  to  open  the 
account,  so  First  Republic  Employee-2  called  another  employee  of  First  Republic  (“First  Republic 
Employee-l”),  a  preferred  banker  at  that  branch,  to  assist  Cohen.  At  1 1:00  a.m..  First  Republic 
Employee-1  called  Cohen.  I  know  from  my  participation  in  an  interview  with  First  Republic 
Employee-1,  that  around  the  time  of  the  call  he  went  to  Cohen’s  office  in  Trump  Tower — on  the 
same  floor  as  the  Trump  Organization^ — and  went  through  account  opening  questions,  including 
know  your  customer  questions,  with  Cohen.  In  response  to  a  series  of  Icnow-your-customer 
questions  about  the  purpose  of  the  accoimt — ^the  answers  to  which  First  Republic  Employee-1 
entered  into  a  form — Cohen  stated,  in  sum  and  substance,  that  he  was  opening  Essential 
Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting  work, 
and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States.  Based 
on  my  review  of  records  obtained  fi'om  First  Republic,  it  appears  that  this  account  (the  “Essential 
Consultants  Account”)  was  created  at  a  time  between  1 1 :00  a.m.  and  1 :00  p.m. 

e.  At  1:47  p.m.,  Cohen  called  Davidson  and  they  spoke  for  approximately  two 
minutes.  At  approximately  1:49  p.m.,  Davidson  emailed  Cohen  wiring  instructions  for  an 

attorney  client  trust  account  at  City  National  Bank. 
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f.  After  the  Essential  Consultants  Account  was  opened  on  October  26,  2016,  Cohen 
transferred  $131,000  from  a  home  equity  line  of  credit  that  Cohen  had  at  First  Republic  to  the 
Essential  Consultants  Account.  Following  the  transfer,  at  approximately  4:15  p.m.  on  October 
26,  2016,  First  Republic  Employee-2’ s  assistant  emailed  Cohen  at  his  Trump  Organization  email 
address  to  tell  him  that  the  funds  had  been  deposited  into  the  Essential  Consultants  Account. 
Cohen  forwarded  that  email  to  the  Cohen  Gmail  Account  and  then  forwarded  it  to  Davidson. 

 g.  At  6:37  p.m.,  Cohen  asked  Pecker  by  text  message,  “Can  we  spealc?  Important.” 

Cohen  called  Pecker  at  6:49  p.m.  and  connected  for  thirty  seconds.  At  6:57  p.m.,  Cohen  sent 
Howard  a  text  message,  stating:  “Please  call  me.  Important.”  Cohen  called  Howard  at  7:00  p.m. 
and  connected  for  about  thufy  seconds.  At  7:06  p.m.,  Cohen  called  Pecker  again  and  they  spoke 
for  nearly  thufeen  minutes.  At  7:24  p.m.,  Howard  sent  a  text  message  to  Cohen  that:  “He  said 
he’d  call  me  back  in  20  minutes.  I  told  him  what  you  are  asking  for  his  [sic]  reasonable.  I’ll  get 
it  sorted.”  Approximately  an  hour  later,  at  8:23  p.m.,  Howard  told  Cohen  by  text  message  to 
“check  your  Gmail  for  email  from  my  private  account.”  In  an  email  sent  at  8:23  p.m.  by  Howard 
to  Cohen  and  Davidson,  with  the  subject  line  “Confumation,”  Howard  stated,  “Thank  you  both 
for  chatting  with  me  earlier.  Confirming  agreement  on:  -  Executed  agreement,  hand-signed  by 
Keith’s  client  and  returned  via  overnight  or  same-day  FedEx  to  Michael,  -  Change  of  agreement 
to  reflect  the  correct  LLC,  -  Transfer  of  funds  on  Thursday  AM  to  be  held  in  escrow  until  receipt 
of  agi'eement.”  After  receiving  that  email,  at  approximately  8:27  p.m.,  Cohen  asked  Howard  by 
text  message,  “Can  you  and  David  [Pecker]  give  me  a  call.”  Howard  promptly  responded:  “David 
is  not  around  I  think.  I’ll  call.”  At  8:28  p.m.,  Howard  called  Cohen  and  they  spoke  for  three 
minutes. 
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22.  On  October  27,  2016,  Cohen  made  a  payment  to  Davidson  of  $130,000 — 
with  the  funds  intended  for  Clifford — ^for  the  purpose  of  securing  her  ongoing  silence  witli  respect 
to  the  allegations  that  she  had  an  extramarital  affair  with  Trump.  Specifically,  based  on  my 
review  of  toll  records,  banlc  records,  and  information  obtained  pursuant  to  the  iCloud  Warrant  and 
Cohen  Email  Warrants,  I  have  learned  the  following: 

a.  At  9:47  a.m.,  Cohen  sent  Davidson  an  email,  stating:  “Keith,  kindly  confirm  that 
the  wire  received  today,  October  27,  2016  shall  be  held  by  you  in  your  attorney’s  trust  account 
until  such  time  as  directed  for  release  by  me,  in  writing.  Additionally,  please  ensure  that  all 
paperwork  contains  the  correct  name  of  Essential  Consultants  EEC.  I  thank  you  in  advance  for 
your  assistance  and  look  fomard  to  hearing  from  you  later.” 

b.  At  approximately  10:01  a.m.,  according  to  records  provided  by  First  Republic 
Bank,  Cohen  completed  papemork  to  wire  $130,000  from  the  Essential  Consultants  Account — 
which  had  been  funded  a  day  prior  from  Cohen’s  home  equity  line  of  credit — ^to  the  attorney  client 
trust  account  at  City  National  Banlc  that  Davidson  had  specified  in  the  wiring  instructions  he  sent 
to  Cohen.  The  wire  transfer  was  made  shortly  thereafter. 

c.  At  10:02  a.m.,  Davidson  responded  to  Cohen’s  email  from  9:47  a.m.,  stating:  “I 
confirm  that  I  will  work  in  good  faith  &  that  no  funds  shall  be  disbursed  unless  &  mftil  the  plaintiff 
personally  signs  all  necessary  settlement  paperwork,  (the  form  of  which  will  match  the  prior 
agreement).  The  settlement  docs  will  name  the  correct  coiporation,  (Essential  Consultants  EEC). 
Plaintiffs  signature  will  be  notarized  and  returned  to  you  via  FedEx.  Only  after  you  receive  FedEx 
will  I  disbui'se.  Fair?” 

d.  At  10:50  a.m..  First  Republic  Employee-1  sent  Cohen  an  email  confirming  that  the 
payment  had  been  sent  and  providing  him  with  the  wire  number. 
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23.  On  October  28,  2016,  and  the  days  that  followed,  Cohen  finalized  the 
ti-ansaction  with  Davidson.  Specifically,  based  on  my  review  of  toll  records,  information  obtained 
pursuant  to  the  iCloud  Warrant,  public  sources,  and  banlc  records,  I  know  the  following: 

a.  On  October  28,  2016,  at  11:48  a.m.,  Cohen  spoke  to  Trump  for  approximately  five 
minutes.  Beginning  at  1:21  p.m.,  Cohen  attempted  a  series  of  phone  calls  to  Davidson,  Pecker, 
and  Howard  throughout  the  day,  although  it  appears  he  may  only  have  comiected  with  Howard. 

b.  Later  that  day,  at  approximately  7:01  p.m,,  Davidson  stated  to  Cohen  by  text 

message  that  “all  is  AOK.  I  should  have  signed,  notarized  docs  on  Monday.  You  should  have 
them  on  Tuesday.”  Cohen  thanked  him  and  said  “I  hope  we  are  good.”  Davidson  responded,  “I 
assure  you.  We  are  very  good.”  Howard  also  texted  Cohen  at  7:08  p.m.,  “Keith  [Davidson]  says 
we  are  good.”  Cohen  then  responded  “OK”  to  Howard  and  “Excellent”  to  Davidson.  At 
approximately  10:30  p.m.,  Cohen  spoke  to  Hicks  for  three  minutes. 

c.  On  October  31,  2016,  Cohen  called  Howard  at  8:22  p.m.  and  they  spoke  for  over 
three  minutes.  At  8:32  p.m.,  Cohen  received  text  messages  from  both  Howard  and  Davidson. 
Howai'd  said:  “You’ll  have  paperwork  tomorrow  says  KD.”  Davidson  said:  “We  are  AOK.  You 
will  be  receiving  a  package  tomon'ow.”  Cohen  responded  “Thanlc  you”  to  Howard  and  “Thanlcs 
Keith.  Will  call  you  then”  to  Davidson.  From  my  involvement  in  this  investigation,  I  believe 
Davidson  was  referring  to  a  signed  nondisclosure  agreement  when  he  told  Cohen  that  he  would 
receive  a  package. 

d.  Based  on  my  review  of  couit  filings  that  became  public  in  20 1 8, 1  have  learned  that 
on  or  about  October  28,  2016,  “EC,  EEC  and/or  David  Dennison”  entered  into  a  “confidential 
settlement  agreement  and  mutual  release”  with  “Peggy  Peterson,”  pursuant  to  which  “Peterson” 
agreed  not  to  disclose  certain  “confidential  infonnation  pertaining  to  [Dennison]”  in  exchange  for 
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$130,000.  The  agreement  provided  that  “EC,  LLC”  would  whe  the  funds  to  “Peterson’s” 
attorney,  who  would  then  transfer  funds  to  “Peterson.”  Cohen  signed  the  agreement  on  behalf  of 
“EC,  LLC.”  The  agreement  stated  drat  the  address  for  “EC,  LLC,”  which  was  later  refen-ed  to  in 
the  agreement  as  “Essential  Consultants,  LLC,”  was  Cohen’s  residence. 

e.  Consistent  with  the  “confidential  settlement  agreement  and  mutual  release,”  on  or 
about  November  1,  2016,  Davidson  transferred  $96,645  from  his  attorney  client  trust  account  at 
City  National  Banlcto  a  banlc  account  in  Clifford’s  name.  The  wire  had  the  annotation  “net 

settlement.”  On  the  same  day,  at  approximately  9:48  a.m.  Davidson  sent  Cohen  a  text  message 
with  a  picture  of  a  FedEx  deliveiy  confirmation,  stating  that  at  approximately  9:09  a.m.  a  package 
shipped  by  Davidson  the  previous  day  had  arrived  for  Cohen  at  his  Trump  Organization 
address.  On  the  same  day,  at  approximately  6:14  p.m.,  Davidson  sent  Cohen  an  email  with  an 
audio  file  attached  and  said  “Give  this  a  lesson  [sic]  and  then  call  me.”  The  audio  attachment  was 
titled  “Stormy .mp3”  and  was  a  five-minute  recording  of  Davidson  interviewing  Clifford  about 
recent  public  allegations  made  by  an  adult  film  star  named  Jessica  Drake  regarding  her  alleged 
past  affair  with  Trump;  in  the  recording,  Clifford  explained  the  reasons  she  believed  that  Drake 
was  not  credible.  Less  than  an  hour  later,  at  approximately  7:05  p.m.,  Cohen  called  Trump,  but 
it  appeai-s  that  they  did  not  connect.  Cohen  then  called  a  telephone  number  belonging  to 
Kellyaime  Conway,  who  at  the  time  was  Tmmp  ’  s  campaign  manager.  They  did  not  connect.  At 
approximately  7:44  p.m.,  however,  Cohen  received  a  return  call  from  Conway,  which  lasted  for 
approximately  six  minutes. 

24.  On  November  4,  2016,  just  three  days  after  the  Clifford  transaction  was 
completed  and  just  four  days  before  the  presidential  election,  the  Wall  Street  Journal  published  an 
article  alleging  that  the  National  Enquirer  had  “Shielded  Donald  Tmmp”  from  allegations  by 
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Playboy  model  Karen  McDougal  that  she  and  Trump  had  an  affair.  The  article  alleged  that  AMI 
had  agreed  to  pay  McDougal  to  bury  her  story.  McDougal,  like  Clifford,  had  been  represented 
by  Davidson.  Based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen 
Email  Warrants  and  iCloud  Warrant,  and  public  sources,  it  appeal's  that  Cohen  spoke  frequently 
to  Davidson,  Howard,  Pecker,  and  Hicks  around  the  time  of  this  article’s  publication^ — -just  days 
before  Election  Day^ — ^about  the  importance  of  preventing  the  McDougal  and  Clifford  stories  from 
gaining  national  traction.  Specifically,  I  have  learned  the  following: 

a.  Between  4:30  and  8:00  p.m.  on  November  4,  Cohen  communicated  several  times 
with  Howard,  Pecker  and  Davidson.  For  instance,  at  approximately  4:49  p.m.,  Cohen  sent 
Howard  a  text  message  with  a  screenshot  of  an  email  forwarded  to  him  by  another  Trump 
Organization  lawyer.  The  forwarded  email  was  fr'om  a  Wall  Street  Journal  reporter,  and  asked  for 
comment  from  Trump  and/or  the  campaign  on  the  story.  Cohen  also  spoke  with  Ehclcs  several 
times,  including  shortly  before  and/or  after  calls  with  Pecker,  Howard  and  Davidson.  Indeed,  at 
approximately  7:33  p.m.,  using  two  different  cellphones  subscribed  to  him,  Cohen  appears  to  have 
been  talking  to  Davidson  and  Hicks  at  the  same  time. 

b.  At  approximately  8:51  p.m.,  Cohen  sent  Howard  a  message,  stating:  “She’s  being 

really  difficult  with  giving  Keith  a  statement.  Basically  went  into  hiding  and  unreachable.”  One 

minute  later,  Howard  responded:  “Fll  ask  him  again.  We  just  need  her  to  disappear.”  Cohen 

responded,  “She  definitely  disappeared  but  refuses  to  give  a  statement  and  Keith  cannot  push  her.” 

At  approximately  8:55  p.m.,  Howard  responded  to  Cohen’s  text:  “Let’s  let  the  dust  settle.  We  don’t 

want  to  push  her  over  the  edge.  She’s  on  side  at  present  and  we  have  a  solid  position  and  a  plausible 

position  that  she  is  rightfully  employed  as  a  columnist.”  Based  on  my  involvement  in  this 

investigation,  I  believe  Cohen  and  Howard  were  referring  to  Karen  McDougal  when  they  were 

19 


Case  l:18-cr-00602-WHP  Document  48-8  Filed  07/18/19  Page  20  of  62 


discussing  “she”  and  “her.”  Additionally,  I  believe  Howard’s  statement  that  “we  have  ...  a 
plausible  position  that  she  is  rightfully  employed  as  a  columnist”  was  a  reference  to  the  fact  that 
AMI  had  given  McDougal  payments  for  her  role  as  a  purported  columnist  for  the  company. 

c.  At  approximately  8:58  p.m.  on  November  4,  2016,  Howard  attempted  to  reassure 
Cohen  about  the  effect  of  the  forthcoming  Wall  Street  Journal  article,  texting,  “I  think  it’ll  be  ok 
pal.  I  thinlc  it’ll  fade  into  the  distance.”  Cohen  responded,  “He’s  pissed.”  Howard  wrote  back, 
“I’m  pissed!  You’re  pissed.  Pecker  is  pissed.  Keith  is  pissed.  Not  much  we  can  do.”  Based 

on  my  involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  Trump  when  he  stated 
“he’s  pissed.”  Cohen  asked  Howard  at  approximately  9:00  p.m.  how  the  Wall  Street  Journal 
could  publish  its  article  if  “everyone  denies.”  Howard  responded,  “Because  there  is  the  payment 
from  AMI.  It  loolcs  suspicious  at  best.” 

d.  At  approximately  9:03  p.m.,  Hicks  called  Cohen  and  they  spoke  for  two  minutes. 
At  approximately  9:11  p.m.,  Cohen  called  Howard  and  spoke  to  him  for  five  minutes.  At 
approximately  9:15  p.m.,  Hicks  called  Cohen  and  they  spoke  for  nearly  seven  minutes.  Again, 
Cohen  used  different  phones  for  these  two  calls,  such  that  he  appears  to  have  been  on  both  calls 
for  about  a  minute  of  overlap.  At  approximately  9:32  p.m.,  Cohen  texted  Pecker,  “The  boss  just 
tried  calling  you.  Are  you  fi-ee?”  A  minute  later,  Cohen  texted  Howard,  “Is  there  a  way  to  find 
David  quickly?” 

e.  At  approximately  9:50  p.m.,  the  Wall  Street  Journal  article  was  published  online. 
Howai'd  and  Hicks  both  sent  web  links  for  the  article  to  Cohen.  Over  the  next  half  hour,  Cohen 
and  Howard  exchanged  several  text  messages  commenting  on  how  the  story  came  across. 
The  next  morning  on  November  5, 2016,  at  approximately  7:35  a.m.,  Cohen  texted  Hicks,  “So  far 
I  see  only  6  stories.  Getting  little  to  no  traction.”  Hicks  responded,  “Same.  Keep  praying! !  It’s 
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working!”  Cohen  wrote  back,  “Even  CNN  not  talking  about  it.  No  one  believes  it  and  if 
necessary,  I  have  a  statement  by  Storm  denying  ever3^hing  and  contradicting  the  other  pom  stars 
statement.  I  wouldn’t  use  it  now  or  even  discuss  with  him  as  no  one  is  talking  about  this  or  cares!” 
Based  on  my  involvement  in  this  investigation,  I  believe  Cohen  was  refeming  to  the  above- 
referenced  recorded  audio  statement  by  Clifford  that  he  obtained  from  Davidson,  and  was  stating 
that  such  a  statement  could  be  used  to  influence  potential  negative  media  relating  to  Trump,  but 
was  unnecessary  at  that  time.  Based  on  a  text  message  from  Hicks  to  Cohen,  I  believe  that  later 

that  morning.  Pecker  spoke  to  Tmmp. 

25.  On  or  about  November  8,  2016,  Trump  won  tire  election  for  President  of 
the  United  States. 

26.  On  or  about  January  12,  2018,  the  Wall  Street  Journal  first  reported  that 
Cohen  arranged  a  payment  to  Clifford.  On  or  about  January  22,  2018,  Common  Cause,  a 
government  watchdog  group,  filed  a  complaint  with  the  Federal  Election  Commission,  alleging 
that  Cohen  had  violated  campaign  finance  laws  by  maldng  the  payment  to  Clifford.  Based  on  my 
review  public  sources  following  that  report,  as  well  as  emails  obtained  pursuant  to  the  Cohen  Email 
Warrants,  I  have  learned  the  following: 

a.  On  or  about  January  23,  2018,  the  day  after  Common  Cause  filed  its  complaint, 

Cohen  began  emailing  himself  drafts  of  statements  describing  his  payment  to  Clifford. 

Additionally,  on  January  23,  2018,  Cohen  emailed  the  following  draft  of  that  statement  to  an 

individual  who  appears  to  be  writing  a  book  on  Cohen’s  behalf: 

In  October  2016, 1  was  contacted  by  counsel  for  Ms.  Clifford  stating  that 
news  outlets,  including  ABC  news,  were  pursuing  the  2011  story  of  an 
alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.  Despite  the  fact  that 
both  parties  had  already  denied  the  allegation,  as  Mr.  Trump’s  longtime 
special  counsel  and  protector,  I  took  it  upon  myself  to  match  the  offer  and 
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keep  the  story  from  breaking.  I  Icnew  the  allegation  to  be  false,  but  I  am 
also  a  realist  who  understands  that  just  because  something  is  false  doesn ’t 
mean  that  it  doesn 't  create  harm  and  damage.  I  could  not  allow  this  to 
occur.  I  negotiated  a  non-disclosure  agreement  with  Ms.  Clifford’s 
counsel  and  tendered  the  funds.  I  did  this  through  my  Delaware  LLC  and 
transferred  personal  funds  to  cover  the  agi'eement.  I  was  not  reimbursed 
any  monies  from  Mr.  Trump,  the  Trump  Organization,  any  third  party  or 
the  Presidential  campaign.  At  no  point  did  I  ever  advise  Mr.  Trump  of  my 
communications  or  actions  regarding  this  agreement.  As  outlandish  and 
unusual  as  this  may  appear,  the  Trumps  have  been  like  family  to  me  for 
over  a  decade.  It’s  what  you  do  for  family. 

(Emphasis  added.)  Based  on  my  involvement  in  this  investigation,  I  believe  that  the  above  email 

is  an  acloiowledgement  that  the  allegation  of  the  affair  had  existed  for  some  time  {“...the  2011 
story. . .”),  but  that  Cohen  was  motivated  to  “keep  the  story  from  breaking”  again  in  October  2016. 

b.  On  or  about  February  13,  2018,  Cohen  said  in  a  statement  to  The  New  York  Times 
that  “Neither  the  Trump  Organization  nor  the  Tramp  campaign  was  a  party  to  the  transaction  with 
Ms.  Clifford.  The  payment  to  Ms.  Clifford  was  lawful,  and  was  not  a  campaign  contribution  or  a 
campaign  expenditure  by  anyone.”  Cohen  declined  to  answer  follow-up  questions  including 
whether  Trump  had  been  aware  of  the  payment,  why  Cohen  made  the  payment,  or  whether  similar 
payments  had  been  made  to  other  people. 

c.  On  or  about  February  14,  2018,  Cohen  was  asked  by  The  New  York  Times  whether 
Trump  had  reimbursed  him,  whether  he  and  Trump  had  made  any  arrangement  at  the  time  of  the 
payment,  or  whether  he  had  made  payments  to  other  women.  Cohen  stated  in  response,  “I  can’t 
get  into  any  of  that.”  On  or  about  February  14,  2018,  Cohen  also  stated  to  The  Washington  Post 
that:  “In  a  private  transaction  in  2016, 1  used  my  own  personal  funds  to  facilitate  a  payment  of 
$130,000  to  Ms.  Stephanie  Clifford.  Neither  the  Tramp  Organization  nor  the  Trump  campaign 
was  a  party  to  the  fransaction  with  Ms.  Clifford,  and  neither  reimbursed  me  for  the  payment,  either 


directly  or  indirectly.” 
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d.  On  or  about  March  9,  2018,  Cohen  stated  to  ABC  News  that  “tlie  funds  were  taken 
from  my  home  equity  line  and  transferred  internally  to  my  LLC  account  in  the  same  bank.” 

27.  For  the  foregomg  reasons,  there  is  probable  cause  to  believe  that  Cohen 
committed  the  Subject  Offense  by  making  an  in-kind  contribution  to  Trump  or  the  Trump 
campaign  in  the  form  of  a  $130,000  payment  to  Clifford  on  the  election.  Indeed,  while  Cohen 
denies  having  given  an  unlawful  contribution,  in  his  own  statements  Cohen  has  admitted  that  he 
paid  $130.000  of  his  “personal  funds”  to  Clifford  and  that  the  payment  occun-ed  less  than  two 
weeks  before  the  election,  as  Trump  was  facing  negative  media  allegations  about  his  behavior 
toward  women,  even  though  allegations  of  an  affair  between  Trump  and  Clifford  existed  since 
2011. 

28.  I  have  reviewed  records  maintained  by  AT&T,  from  which  I  have  learned, 
m  substance  and  in  part,  that  the  Target  Cellulai-  Devices  ai-e  still  active.  Based  on  my  training 
and  experience,  my  familiarity  with  this  investigation,  and  the  information  set  forth  above,  I 
therefore  believe  that  the  requested  data  will  lead  to  evidence  of  the  Subject  Offense. 
Specifically,  information  will  lead  to  the  present  location  of  the  Target  Cellular  Devices;  law 
enforcement  may  then  obtain  evidence  from  the  Target  Cellular  Devices,  by  subpoena  or  search 
warrant,  including  but  not  limited  to  contact  lists  containing  contact  information  for  participants 
in  the  illegal  campaign  contribution  scheme  and  well  as  text  messages  between  these  participants. 

MANKER  OF  EXECUTION 

29.  In  my  training  and  experience,  I  have  learned  that  cellular  phones  and  other 

cellular  devices  communicate  wirelessly  across  a  network  of  cellular  infrastructure,  including 

towers  that  route  and  connect  individual  communications.  When  sending  or  receiving  a 

communication,  a  cellular  device  broadcasts  certain  cellular  and  wifi  signals  to  the  cellular  tower 

23 


Case  l:18-cr-00602-WHP  Document  48-8  Filed  07/18/19  Page  24  of  62 


that  is  routing  its  communication.  These  cellulai-  and  wifi  signals  mclude  a  cellular  device’s 
unique  identifiers. 

30.  To  facilitate  execution  of  this  waiTant  to  determine  the  location  of  the  Target 
Cellular  Devices,  law  enforcement  may  use  an  investigative  device  or  devices  capable  of 
broadcasting  cellular  and  wifi  signals  that  will  be  received  by  the  Taiget  Cellular  Devices  or 
receiving  cellular  and  wifi  signals  from  nearby  cellular  devices,  including  the  Target  Cellular 

Devices. _ Such  adevice  may  function  in  some  respects  like  a  cellular  tower,  except  that  it  will  not 

be  connected  to  the  cellular  network  and  cannot  be  used  by  a  cell  phone  to  communicate  with 
others.  The  device  may  send  a  signal  to  the  Target  Cellular  Devices  and  nearby  cellular  devices 
and  thereby  prompt  them  to  send  cellular  and  wifi  signals  that  include  the  unique  identifier  of  the 
device.  Law  enforcement  may  monitor  the  cellular  and  wifi  signals  broadcast  by  the  Target 
Cellular  Devices  for  non-content  signal  information  and  use  that  information  to  determine  the 
Target  Cellular  Devices’  location,  even  if  it  is  located  inside  a  house,  apartment,  or  other  building. 
The  device  will  not  intercept  the  contents  of  the  Target  Cellular  Devices’  communications,  such 
as  telephone  calls,  text  messages,  and  other  electronic  communications.  Further,  the  device  will 
not  collect  any  other  data  stored  on  the  Target  Cellular  Devices,  including  e-mails,  text  messages, 
contact  lists,  images,  or  Global  Positioning  System  (GPS)  data. 

31.  The  investigative  device  may  interrupt  cellular  service  of  phones  or  other 
cellular  devices  within  its  immediate  vicinity.  Any  service  disruption  to  non-target  devices  will 
be  brief  and  temporary,  and  all  operations  will  attempt  to  limit  the  interference  with  such  devices. 
In  order  to  connect  with  the  Target  Cellular  Devices,  the  device  may  briefly  exchange  cellular  and 
wifi  signals  with  all  phones  or  other  cellular  devices  in  its  vicinity  to  determine  whether  those 
devices’  xmique  identifiers  match  the  identifiers  of  the  Target  Cellular  Devices.  These  cellular 
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and  wifi  signals  may  include  cell  phone  identifiers.  The  device  will  not  complete  a  connection 
with  cellular  devices  determined  not  to  be  the  Tai-get  Cellular  Devices,  and  law  enforcement  will 
limit  collection  of  information  fi'om  devices  other  than  the  Target  Cellular  Devices.  To  the  extent 
that  any  information  from  a  cellular  device  other  than  the  Target  Cellular  Devices  is  collected  by 
the  law  enforcement  device,  law  enforcement  will  delete  that  information,  and  law  enforcement 
will  malce  no  investigative  use  of  it  absent  further  order  of  the  couit,  other  than  distinguishing  the 
Target  Cellular’  Devices  from  all  other  cellular  devices.  

AUTHORIZATION  REQUEST 

32.  Based  on  the  foregoing,  I  request  that  the  Court  issue  the  proposed  search 
warrant,  pursuant  to  Federal  Rule  of  Criminal  Procedure  41.  The  proposed  warrant  also  will 
function  as  a  pen  register  order  under  18  U.S.C.  §  3123. 

33.  I  further  request,  piu’suant  to  18  U.S.C.  §  3103a(b)  and  Federal  Rule  of 
Criminal  Procedure  41(1)(3),  that  the  Court  authorize  the  officer  executing  the  warrant  to  delay 
notice  until  30  days  from  the  end  of  the  period  of  authorized  siuveillance.  This  delay  is  justified 
because  there  is  reasonable  cause  to  believe  that  providing  immediate  notification  of  the  warrant 
may  have  an  adverse  result,  as  defined  in  18  U.S.C.  §  2705.  Providing  immediate  notice  to  the 
subscriber  or  user  of  the  Target  Cellular  Devices  would  seriously  jeopai’dize  the  ongoing 
investigation,  as  such  a  disclosure  would  give  that  person  an  opportunity  to  destroy  evidence, 
cliange  patterns  of  behavior,  and  notify  confederates.  See  18  U.S.C.  §  3103a(b)(l).  There  is 
reasonable  neeessity  for  the  use  of  the  technique  described  above,  for  the  reasons  set  forth  above. 

18  U.S.C.  §  3103a(b)(2). 
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34.  I  further  request  that  tlie  Court  authorize  execution  of  the  warrant  at  any 
time  of  day  or  night,  owing  to  the  potential  need  to  locate  the  Target  Cellular  Devices  outside  of 


daytime  hours. 

35.  I  further  request  that  the  Court  order  that  all  papers  in  support  of  this 
application,  including  the  affidavit  and  search  waiTant,  be  sealed  until  further  order  of  the  Court. 
These  documents  discuss  an  ongoing  criminal  investigation  tliat  is  neither  public  nor  known  to  all 
of  the  targets  of  the  investigation.  Accordingly,  there  is  good  cause  to  seal  these  documents 
because  their  premature  disclosure  may  seriously  jeopardize  that  investigation. 

36.  A  search  warrant  may  not  be  legally  necessary  to  compel  the  investigative 
technique  described  herein.  Nevertheless,  I  hereby  submit  this  warrant  application  out  of  an 
abundance  of  caution. 


Respectfully  submitted. 


Federal  Bureau  of  Investigation 


Subscribed  and  sworn  to  before  me  ^  y  ^  ^  ^  ^ 


/ 


UNITED  STi^S  MA.<jISTRATe1uDGE 


I  , 
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IN  THE  UNITED  STATES  DISTRICT  COURT 
FOR  THE  SOUTHERN  DISTRICT  OF  NEW  YORK 


IN  THE  MATTER  OF  THE  USE  OF  A  CELL- 
SHE  SIMULATOR  TO  LOCATE  THE  Case 
CELLULAR  DEVICES  ASSIGNED  CALL 


18 MAG  2974 


NUMBERS 


AND 


Filed  Under  Seal 


WARRANT  AND  ORDER  OF  AUTHORIZATION 

TO:  Special  Agents  of  the  Federal  Buareau  of  Investigation  and  Other  Authorized 

Personnel 

1.  Findings 

The  Court  hereby  finds: 

1.  Upon  an  affidavit  of  Special  Agent  the  Federal  Bureau  of 

Investigation  (“Affidavit”)  and  pursuant  to  Federal  Rule  of  Criminal  Procedure  41,  there  is 
probable  cause  to  believe  that  violations  of  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l) 
(illegal  campaign  contilbutions)  (the  “Subject  Offense”)  have  been  committed  by  Michael  Cohen 
(the  “Target  Subject”),  and  that  the  Target  Subject  uses  cellular  devices  assigned  call  numbers 


the  (“Target  Cellular  Devices”),  which  are  described  in 


Attachment  A.  Further,  there  is  probable  cause  to  believe  that  the  location  of  the  Target  Cellular 
Device  will  constitute  evidence  of  the  Subject  Offense.  Specifically,  there  is  probable  cause  to 
believe  that  the  location  of  the  Target  Cellular  Devices  will  constitute  evidence  of  those  criminal 
violations,  including  leading  to  the  location  of  the  Target  Cellular  Devices,  on  which  there  is 
probable  cause  to  believe  evidence  of  these  offenses  exist,  as  detailed  below. 

2.  Pm-suant  to  18  U.S.C.  §  3123(b)(1),  the  Government  has  certified  that  the  pen 


register  information  for  the  Target  Cellular  Devices  is  relevant  to  an  ongoing  investigation  by  the 


Case  l:18-cr-00602-WHP  Document  48-8  Filed  07/18/19  Page  28  of  62 


Investigating  Agency  of  the  Target  Subject  and  others  unknown  in  connection  with  suspected 
violations  of  the  Subject  Offense. 

NOW,  THEREFORE,  pursuant  to  Fed.  R.  Crim.  P.  41,  18  U.S.C.  §§  3121  et  seq.,  and  18 
U.S.C.  §  3103a,  IT  IS  HEREBY  ORDERED: 
n.  Warrant  and  Order  of  Authorization 

3.  Warrant.  Law  enforcement  agents  and  other  authorized  law  enforcement 
officials  are  hereby  authorized  to  employ  an  electronic  investigative  teclmique,  which  is  described 

in  Attachment  B,  to  the  determine  the  location  of  the  Target  Cellular  Devices,  which  are  described 
in  Attachment  A. 

4.  Data  Collection  and  Retention.  In  the  course  of  employing  the  technique,  law 
enforcement  agents  and  other  authorized  law  enforcement  officials  (a)  must  make  reasonable 
efforts  to  limit  interference  with  cellular  devices  other  than  the  Target  Cellular  Devices,  (b)  must 
promptly  delete  information  collected  from  cellular  devices  other  than  the  Target  Cellular  Devices 
once  the  Target  Cellular  Devices  is  located,  and  (c)  are  prohibited  from  using  data  acquired  beyond 
that  necessary  to  locate  the  Target  Cellular  Devices,  absent  further  order  of  the  Court. 

5.  Delayed  Notice.  Pm’suant  to  18  U.S.C.  §  3103a(b)  and  Federal  Rule  of  Criminal 
Procedure  41(1)(3),  the  Court  authorizes  the  officer  executing  the  wan-ant  to  delay  in  notice  until 
30  days  fi-om  the  end  of  the  period  of  authorized  surveillance.  This  delay  is  justified  because 
there  is  reasonable  cause  to  believe  that  providing  immediate  notification  of  the  warrant  may  have 
an  adverse  result,  as  defined  in  18  U.S.C.  §  2705.  Providing  immediate  notice  to  the  subscriber 
or  user  of  the  Target  Cellular  Devices  would  seriously  jeopardize  the  ongoing  investigation,  as 
such  a  disclosure  would  give  that  person  an  opportunity  to  destroy  evidence,  change  patterns  of 
behavior,  and  notify  confederates.  See  18  U.S.C.  §  3103a(b)(l).  There  is  reasonable  necessity 
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for  the  use  of  the  technique  described  above,  for  the  reasons  set  forth  above.  See  18  U.S.C,  § 
3103a(b)(2). 

6.  Time  of  Execution.  The  Court  authorizes  execution  of  this  Warrant  at  any  time 
of  day  or  night,  owing  to  the  potential  need  to  locate  the  Target  Cellular  Devices  outside  of  daytime 
hours. 

7.  Sealing.  This  Warrant  and  Order,  and  the  supporting  Agent  Affidavit,  shall  be 
sealed  until  fiirther  order  of  the  Court,  except  that  the  Government  may  withputfarjherprdeLof 
this  Court:  provide  copies  of  the  Warrant  and  Order  or  the  supporting  Application  and  Agent 
Affidavit  as  need  be  to  personnel  assisting  the  Government  in  the  uivestigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosui’e 
obligations  in  any  prosecutions  related  to  this  matter. 

Dated:  New  York,  New  York 


u  ~f  -  {  f 


('f J' 


Date  Issued 


Time  Issued 


\ 


UNI  UDGE 

Southern  District  of  New  York' 
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ATTACHMENT  A 

This  warrant  authorizes  the  use  of  the  electronic  investigative  technique  described  in 
Attachment  B  to  identify  the  location  of  the  cellular  devices  assigned  phone  numbers 
^^^^^^^^^^^Hwhose  wireless  provider  is  AT&T,  and  whose  listed  subscriber  is  Michael 


Cohen. 
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ATTACHMENT  B 

Pursuant  to  an  investigation  of  Michael  Cohen  for  a  violation  of  52  U.S.C.  §§ 
30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions)  (the  “Subject  Offense”), 
this  Warrant  authorizes  the  officers  to  whom  it  is  directed  to  determine  the  location  of  the  cellular 
devices  identified  in  Attachment  A  by  collecting  and  examining; 

1.  radio  cellular  and  wifi  signals  emitted  by  the  target  cellulai'  device  for  the  pmpose  of 
communicating  with  cellular  infrastructure,  including  towers  that  route  and  connect 
individual  communications;  and 

2.  radio  cellular  and  wifi  signals  emitted  by  the  target  cellulai'  device  in  response  to  radio 
cellular  and  wifi  signals  sent  to  the  cellular  device  by  the  officers; 

for  a  period  of  thirty  days,  dm'ing  all  times  of  day  and  night.  This  warrant  does  not  authorize  the 
interception  of  any  telephone  calls,  text  messages,  other  electronic  communications,  and  this 
warrant  prohibits  the  seizure  of  any  tangible  property.  The  Court  finds  reasonable  necessity  for 
the  use  of  the  technique  authorized  above.  See  1 8  U.S.C.  §  3 1 03a(b)(2). 
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IN  THE  UNITED  STATES  DISTRICT  COURT 
FOR  THE  SOUTHERN  DISTRICT  OF  NEW  YORK 


IN  THE  MATTER  OF  THE  USE  OF  A  CELL- 

SITE  SIMULATOR  TO  LOCATE  THE  Case  No. 

CELLULAR  DEVICES  ASSIGNED  CALL 

NUMBERS  AND  ^■■1  Filed  Under  Seal 


AFFIDAVIT  IN  SUPPORT  OF 
AN  APPLICATION  FOR  A  SEARCH  WARRANT 


being  first  duly  sworn,  hereby  depose  and  state  as  follows; 


INTRODUCTION  AND  AGENT  BACKGROUND 


1 .  I  make  this  affidavit  in  support  of  an  application  for  a  search  warrant  under 
Federal  Rule  of  Criminal  Procedure  41  to  authorize  law  enforcement  to  employ  an  electronic 
investigative  technique,  which  is  described  in  Attachment  B,  to  determine  the  location  of  the 
cellular  devices  assigned  call  numbers  ^^^^m||||||||||||||||||||||m(the  “Target  Cellular 
Devices”),  which  are  described  in  Attachment  A. 

2.  I  am  a  Special  Agent  with  the  Federal  Bureau  of  Investigation  (“FBI”).  I 
have  been  a  Special  Agent  with  the  FBI  since  2009.  In  the  course  of  my  experience  and  training 
in  these  positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a 
wide  array  of  financial  crimes,  including  offenses  involving  public  corruption.  I  also  have 
training  and  experience  executing  warrants  for  cellphone  location  data. 

3.  The  facts  in  this  affidavit  come  from  my  personal  observations,  my  training  and 
experience,  and  information  obtained  from  other  agents  and  witnesses.  This  affidavit  is  intended 
to  show  merely  that  there  is  sufficient  probable  cause  for  the  requested  warrant  and  does  not  set 
forth  all  of  my  knowledge  about  this  matter. 
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4.  One  purpose  of  applying  for  this  warrant  is  to  determine  with  precision  the  Target 
Cellular  Devices’  location.  However,  there  is  reason  to  believe  the  Target  Cellular  Devices  are 
currently  located  somewhere  within  this  district  because  the  Target  Cellular  Devices’  owner  is 
known  to  spend  most  of  his  time  in  this  district.  Pursuant  to  Rule  41(b)(2),  law  enforcement  may 
locate  the  Target  Cellular  Devices  outside  the  district  provided  the  device  is  within  the  district 

.  when  the  warrant  is  issued. 

5.  Based  on  the  facts  set  forth  in  this  affidavit,  there  is  probable  cause  to  believe  that 
violations  of  52  U.S.C.  §§  301 16(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions) 
(the  “Subject  Offense”)  has  been  committed,  are  being  committed,  and  will  be  committed  by 
Michael  Cohen  and  others.  There  is  also  probable  cause  to  believe  that  the  location  of  the  Target 
Cellular  Devices  will  lead  to  evidence  of  the  Subject  Offense,  as  detailed  below. 

6.  Because  collecting  the  information  authorized  by  this  warrant  may  fall  within  the 
statutory  definitions  of  a  “pen  register”  or  a  “trap  and  trace  device,”  see  18  U.S.C.,  §  3127(3)  & 
(4),  this  warrant  is  designed  to  comply  with  the  Pen  Register  Statute  as  well  as  Rule  41.  See  18 
U.S.C.  §§  3 121-3127.  This  warrant  therefore  includes  all  the  information  required  to  be  included 
in  a  pen  register  order.  See  1 8  U.S.C.  §  3 123(b)(1). 

PROBABLE  CAUSE 

Introduction 

7.  The  United  States  Attorney’s  Office  for  the  Southern  District  of  New  York 

(“USAO”)  and  the  FBI  are  investigating  a  criminal  violation  of  the  campaign  finance  laws  by 

Michael  Cohen,  a  lawyer  who  holds  himself  out  as  the  personal  attorney  for  President  Donald  J. 

Trump.  As  detailed  below,  there  is  probable  cause  to  believe  that  Cohen  made  an  excessive  in- 

kind  contribution  to  the  presidential  election  campaign  of  then-candidate  Donald  Trump  in  the 

2  • 
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form  of  a  $130,000  payment  to  Stephanie  Clifford,  an  individual  who  is  alleged  to  have  had  an 
extramarital  affair  with  Trump,  in  exchange  for  her  agreement  not  to  disclose  that  alleged  affair 
on  the  eve  of  the  2016  presidential  election. 


8.  The  Target  Cellular  Devices  referenced  in  this  Affidavit  are  the  cellphones 


As  further  discussed  below,  the  Target 


assigned  call  numbers 


Cellular  Devices  are  subscribed  to  in  the  name  of  Michael  Cohen  (the  “Subscriber”).  The 
SubsarihCTiFhliei^To  useAhe  TarptCellphones  and  is  aMarget  S 
AT&T  is  the  Service  Provider  for  the  Target  Cellphones. 

Prior  Relevant  Proeess 

9.  In  connection  with  an  investigation  then  being  conducted  by  the  Office  of 
the  Special  Counsel  (“SCO”),  the  FBI  sought  and  obtained  from  the  Honorable  Beryl  A.  Howell,  ■ 
Chief  United  States  District  Judge  for  the  District  of  Columbia,  three  search  warrants  for  emails 
and  other  content  information  associated  with  two  email  accounts  used  by  Cohen,  and  one  search 
warrant  for  stored  content  associated  with  an  iCloud  account  used  by  Cohen.  Specifically: 


a.  On  or  about  July  18, 2017,  the  FBI  sought  and  obtained  a  search  warrant  for  emails 


fegmail.com  (the  “Cohen  Gmail  Accoxmt”)  sent  or  received  between 


in  the  account 


January  1, 2016.and  July  18, 2017  (the  “First  Cohen  Gmail  Warrant”). 

.  b.  On  or  about  August  8,  2017,  the  FBI  sought  and  obtained  a  search  warrant  for 


fegmah.com  (the 


content  stored  in  the  iCloud  account  associated  with  Apple  ID 


“Cohen  iCloud  Account”  and  the  “Cohen  iCloud  Warrant”). 

c.  On  or  about  November  1 3 , 20 1 7,  the  FBI  sought  and  obtained  a  search  warrant  for 
emails  in  the  Cohen  Gmail  Account  sent  or  received  between  June  1,2015  and  November  13,2017 
(the  “Second  Cohen  Gmail  Warrant”). 
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d.  On  or  about  November  1 3 , 20 1 7,  the  FBI  sought  and  obtained  a  search  warrant  for 
emails  in  the  account  “Cohen  MDCPC  Account”)  sent  or  received 

between  the  opening  of  the  Cohen  MDCPC  Account  and  November  13,  2017  (the  “First  Cohen 
MDCPC  Warrant”). 

10.  The  SCO  has  since  referred  certain  aspects  of  its  investigation  into  Cohen 
to  the  US  AO,  which  is  working  with  the  FBTs  New  York  Field  Office. 

11.  On  or  about  February  28,  2018,  the  USAO  and  FBI  sought  and  obtained 
search  warrants  for  emails  in  Cohen  Gmail  Account  and  Cohen  MDCPC  Account,  among  other 
accounts,  sent  or  received  between  November  14,  2017  and  February  28, 2018  (the  “Third  Cohen 
Gmail  Warrmit”  and  “Second  Cohen  MDCPC  Warrant”).^ 

12.  The  above-described  warrants  are  referred  to  herein  as  the  “Cohen  Emails 
Warrants”  and,  with  respect  to  the  iCloud  Warrant,  the  “Cohen  iCloud  Warrant.” 

The  Illegal  Campaign  Contribution  Scheme 

13.  From  my  review  of  public  sources,  I  have  learned  the  following: 

a.  In  or  around  October  2011,  there  were  rumors  published  on  the  gossip  website 
TheDirty.com  that  Trump  had  had  an  extramarital  affair  with  Clifford,  an  adult  film  actress  whose 
screen  name  . is  Stormy  Daniels,  in  or  around  July  2006.  In  or  about  October  2011,  Life  &  Style 


^  Based  on  my  review  of  this  warrant  and  the  affidavit  in  support  of  it,  I  know  that  the  warrant  did 
not  specify  a  time  period,  but  the  affidavit  indicated  that,  pursuant  to  court  order,  the  serwce 
provider  had  provided  non-content  information  for  the  Cohen  MDCPC  Account  that  indicated  that 
the  account  contained  emails  from  the  approximate  period  of  March  2017  through  the  date  of  fbe 
warrant. 

2  On  or  about  February  28, 2018  and  April  7, 2018,  the.USAO  and  FBI  sought  and  obtained  Rule 
41  search  warrants  authorizing  the  search  of  emails  and  content  obtained  pursuant  to  previously 
issued  warrants  for  additional  subject  offenses. 
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Magazine,  a  tabloid  sold  in  supermarkets,  also  published  an  article,  based  on  the  report  in 
TheDirty.com,  alleging  an  affair  had  occurred  between  Trump  and  Clifford.  Both  Trump  and 
Clifford,  through  their  representatives,  issued  denials  in  response  to  the  articles. 

b.  Specifically,  on  or  about  October  1 1 , 20 1 1 ,  Keith  Davidson,  who  identified  himself 
as  Clifford’s  attorney,  sent  a  cease  and  desist  letter  to  TheDirty.com,  demanding  that  the  article 
regarding  Trump  and  Clifford  be  removed  from  the  website.  Additionally,  on  or  about  October 
1^^^0Tlv“Cohen5-who^was  then-Bxeeutive-¥i^-President-and  Special- Gounsel-To-the-TTuinp 
Organization,  stated  to  E!  News  that  “[t]he  totally  untme  and  ridiculous  story  . . .  emanated  from 
a  sleazy  and  disgusting  website. , . .  The  Trump  Organization  and  Donald  J.  Trump  will  be  bringing 
a  lawsuit .  .  .  [and]  Mr.  Trump  and  the  Trump  Organization  would  like  to  thank  and  commend 
Stormy  Daniels  and  her  attorneys  for  their  honesty  and  swift  actions.” 

14.  On  or  about  June  1 6,  20 1 5,  Trump  formally  launched  his  20 1 6  presidential 
campaign.  On  or  about  May  4,  20 1 6,  Trump  became  the  presumptive  Republican  Party  nominee 
for  president,  and  on  July  1 9,  20 1 6,  Tmmp  officially  became  the  nominee.  Based  on  my  review 
of  public  sources,  I  have  learned  that  while  it  does  not  appear  that  Cohen  had  an  official  title  as 
part  of  the  Trump  campaign,  on  multiple  occasions  Cohen  made  public  statements  on  behalf  of 
Trump  or  his  campaign.  For  instance,  on  or  about  August  1 8,  2016,  Cohen  appeared  on  CNN  to 
defend  Trump’s  polling  numbers. 

15.  On  or  about  October  7, 20 1 6,  The  Washington  Post  published  online  a  video 
and  accompanying  audio  in  which  Trump  referred  to  women  in  what  the  article  described  as 
“vulgar  terms”  in  a  2005  conversation  with  Billy  Bush,  who  was  then  the  host  of  Access 
Hollywood.  The  following  day,  on  October  8,  2016,  Tramp  appeared  in  a  video  in  which  he 
stated,  among  other  things,  “I’ve  said  and  done  things  I  regret  and  words  released  today  on  this 
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I 

I 

I 

I 

more  than  a  decade  old  video  are  one  of  them.  Anyone  who  knows  me  knows  these  words  don’t  | 

reflect  who  I  am.  I  said  it.  I  was  wrong  and  I  apologize.”  Based  on  my  review  of  public  I 

sources,  I  also  know  that  representatives  of  the  Trump  Campaign  stated,  in  sum  and  substance,  | 

I 

that  the  Access  Hollywood  comment  was  an  old  and  isolated  incident.  | 

I 

16.  Based  on  my  review  of  public  sources,  including  an  article  published  in 

Slate  magazine  by  a  reporter  who  interviewed  Clifford,  that  around  this  same  time,  in  or  about  [ 

Qctober-^2016,  Cliffordwasin-discussions  witlrABC:sjSQO(iMQrH?Kg,  show_mdSZafe^ - - k 

magazine,  among  other  media  sources,  to  provide  these  media  outlets  with  her  statement  about  her  | 

t 

l! 

alleged  relationship  with  Trump.  According  to  the  article  in  Slate,  which  the  author  based  on  j 

conversations  with  Clifford  over  the  telephone  and  by  text  message,  Clifford  wanted  to  be  paid  for 

I 

fi 

■  S 

her  story  or  be  paid  by  Trump  not  to  disclose  her  accusation.  As  Cohen  summarized  hi  a  2018 

email  obtained  pursuant  to  the  Cohen  Email  Warrants:  “In  October  2016,  I  was  contacted  by  j 

counsel  for  Ms.  Clifford  stating  that  news  outlets,  including  ABC  News,  were  pursuing  the  201 1 

I 

story  of  an  alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.” 

17.  From  my  review  of  telephone  toll  records^  and  information  produced 
pursuant  to  the  iCloud  Warrant  and  Cohen  Email  Warrants,  I  have  learned  that  in  the  days 
foUowuig  the  Access  Hollywood  video,  Cohen  exchanged  a  series  of  calls,  text  messages,  and 
emails  with  Keith  Davidson,  who  was  then  Clifford’s  attorney,  David  Pecker  and  Dylan  Howard 


^  My  attribution  of  certain  telephone  numbers  to  certain  mdividuals  as  described  in  this 
affidavit  is  based  on  my  review  of  the  vCard  (virtual  contact  file)  and  text  messages  obtained  from 
Cohen’s  telephone  pursuant  to  the  iCloud  Warrant. 
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of  American  Media,  Inc.  (“AMI”),  the  publisher  of  the  National  Enquirer,^  Trump,  and  Hope 
Hicks,  who  was  then  press  secretary  for  Trump’s  presidential  campaign.  For  these  text  messages 
and  calls — ^as  well  as  all  of  the  text  messages  and  calls  referenced  in  this  affidavit  involving 
Cohen — Cohen  used  one  of  the  Target  Cellular  Devices  for  the  communication. 

18.  Based  on  the  timing  of  the  calls  in  the  days  following  the  Access  Hollywood 
story,  and  the  content  of  the  text  messages  and  emails,  I  believe  that  at  least  some  of  these 
communieationaeoncemed  the  need  to  prevent  Glifford  Item  going  public,^  particul^ly;in-the-wake 
of  the  Access  Hollywood  story.  In  particular,  I  have  learned  the  following: 

a.  On  October  8, 2016,  at  approximately  7:20  p.m.,  Cohen  received  a  call  j&bm  Hicks. 
Sixteen  seconds  into  the  call.  Trump  joined  the  call,  and  the  call  continued  for  over  four  minutes.^ 
Based  on  the  toll  records  that  the  USAO  has  obtained  to  date,  I  believe  that  this  was  the  first  call 
Cohen  had  received  or  made  to  Hicks  in  at  least  multiple  weeks,  and  that  Cohen  and  Trump  spoke 
on  the  telephone  about  once  a  month  prior  to  this  date  -  specifically,  prior  to  this  call  on  October 


^  Pecker  is  President  of  AMI  and,  according  to  his  own  statements  in  public  reports,  a  personal 
friend  of  Trump.  Howard  is  the  chief  content  officer  of  AMI,  who  according  to  public  records 
reports  directly  to  Pecker. 

^  I  believe  that  Trump  joined  the  call  between  Cohen  and  Hicks  based  on  my  review  of  toll 
records.  Specifically,  I  know  that  a  call  was  initiated  between  Cohen’s  telephone  number  and 
Trump’s  telephone  number  at  the  same  time  the  records  indicate  that  Cohen  was  talking  to  Hicks. 
After  the  Cohen-Trump  call  was  initiated,  it  lasted  the  same  period  of  time  as  the  Cohen-Hicks 
call.  Additionally,  the  toll  records  indicate  a  “-1”  and  then  Trump’s  telephone  number,  which, 
based  on  my  training  and  experience,  means  that  the  call  was  either  transferred  to  Trump,  or  that 
Trump  was  added  to  the  call  as  a  conference  or  three-way  call  participant,  fri  addition,  based  on 
my  conversations  with  another  law  enforcement  agent  who  has  spoken  to  a  law  enforcement  agent 
who  has  interviewed  Hicks,  I  have  learned  that  Hicks  stated,  in  substance,  to  the  best  of  her 
recollection,  she  did  not  learn  about  the  allegations  made  by  Clifford  until  early  November  2016. 
Hicks  was  not  specifically  asked  about  this  three-way  call. 
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8,  2016,  Cohen  and  Trump  had  spoken  once  in  May,  once  in  June,  once  in  July,  zero  times  in 
August,  and  twice  in  September. 

b.  Approximately  ten  minutes  after  the  call  ended,  Hicks  and  Cohen  spoke  again  for 
about  two  minutes. 

c.  At  7:39  p.m.,  immediately  after  the  second  call  with  Hicks  ended,  Cohen  called 
David  Pecker  (as  noted  above,  the  President  of  American  Media  Inc.,  or  AMI)  and  they  connected 
for  thirty  seconds.  Approximately  four  minutes  later,  Cohen  called  Pecker  again  and  they  spoke 
for  more  than  a  minute.  Three  minutes  after  ending  his  call  with  Pecker,  Cohen  received  a  caU 
from  Dylan  Howard  (as  noted  above,  the  Chief  Content  Officer  of  AMI),  and  they  spoke  for 
approximately  a  minute.  According  to  toll  records,  it  does  not  appear  that  Cohen  and  Howard 
spoke  regularly  prior  to  October  8,  2016,  as  it  had  been  over  a  month  since  they  had  called  each 
other. 

d.  At  7:56  p.m.,  approximately  eight  minutes  after  his  call  with  Howard  ended,  Cohen 
called  Hicks  and  they  connected  for  two  minutes .  At  approximately  the  same  time  this  caU  ended, 
Cohen  received  a  call  from  Pecker,  and  they  spoke  for  about  two  minutes.  At  8:03  p.m.,  about 
three  minutes  after  ending  his  call  with  Pecker,  Cohen  called  Trump,  and  they  spoke  for  nearly 
eight  minutes. 

e.  At  8:39  p.m.  and  8:57  p.m.,  Cohen  received  calls  from  Howard  and  spoke  to  him 
for  about  four  and  six  minutes,  respectively.  At  9:13  p.m.,  about  ten  minutes  after  Cohen  and 
Howard  hung  up  from  the  second  of  these  calls,  Howard  sent  Cohen  a  text  message  that  said: 
“Keith  will  do  it.  Let’s  reconvene  tomorrow.”  Based  on  my  involvement  in  this  investigation,  I 
beheve  that  when  Howard  wrote  “Keith,”  he  was  referring  to  Keith  Davidson,  the  attorney  for 
Stephanie  Clifford. .  At  3 :3 1  a.m.,  now  on  October  9,2016,  Cohen  sent  Howard  a  text  message  in 


8 


Case  l:18-cr-00602-WHP  Document  48-8  Filed  07/18/19  Page  40  of  62 


response  that  said:  “Thank  you.”  Eight  minutes  later,  Cohen  sent  Howard  a  text  message  that 
said:  “Resolution  Consultants  LLC.  is  the  name  of  the  entity  I  formed  a  week  ago.  Whenever  you 
wake,  please  call  my  cell.” 

f.  The  following  day,  on  October  1 0, 20 1 6,  at  1 0 : 5  8  a.m.,  Howard  sent  a  text  message 
to  Cohen  and  Davidson,  which  stated:  “Keith/Michael:  connecting  you  both  in  regards  to  that 
business  opportunity.  Spoke  to  the  client  this  AM  and  they’re  confirmed  to  proceed  with  the 
^opportimtyfMhanks^Pylan.  Qver  to  you~twof’  ""AtM2:25~^p:m;73Davidson  senOCohenyaMe^^ 


message  that  stated:  “Michael  -  if  we  are  ever  going  to  close  this  deal  -  In  my  opinion,  it  needs  to 
be  today.  Keith.”  Davidson  and  Cohen  then  spoke  by  phone  for  about  three  minutes.  Based  on 
my  participation  in  this  investigation,  I  believe  that  when  Howard  wrote  that  the  “client”  was 
“confirmed  to  proceed  with  the  opportunity,”  he  was  referring  to  Clifford’s  agreement  in  principle 
to  accept  money  from  Cohen  in  exchange  for  her  agreement  not  to  discuss  any  prior  affair  with 
then-candidate  Trump.® 

g.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
knowthat  on  or  about  October  10, 2016,  Clifford  and  Davidson  appear  to  have  signed  a  “side  letter 
agreement”  that  stated  it  was  an  exhibit  to  a  “confidential  settlement  agreement  and  mutual 
release”  between  “Peggy  Peterson”  and  “David  Dennison.”  The  purpose  of  the  document, 
according  to  the  agreement,  was  to  define  the  “hue  name  and  identity”  of  persons  named  by 


®  As  set  forth  below,  AMI  was  also  involved  in  a  payment  to  model  Karen  McDougal.  : 

However,  because  these  communications  were  in  close  temporal  proximity  to  the  events  involving  j 

the  negotiation  of  a  payment  to  Clifford,  the  execution  of  the  agreement  with  Clifford,  and  the  ,  f 

payment  of  money  to  Clifford,  T  believe  that  these  communications  were  related  to  Clifford.  [ 

Additionally,  based  on  my  review  of  public  statements  by  McDougal,  I  have  learned  that  she  f 

negotiated  an  agreement  with  AMI  several  months  prior  to  these  communications  between  Cohen  [ 

and  Pecker,  Howard,  and  Davidson.  ' 
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pseudonym  in  “confidential  settlement  agreement  and  mutual  release.”  The  side  letter  agreement 
specifies  the  identity  of  “Peggy  Peterson”  to  be  Clifford,  but  the  space  for  “Dennison’s”  identity 
is  blank.  The  agreement  also  includes  a  signature  page  for  “Peterson  ”  “Dennison,”  and  their 
attorneys.  The  signature  page  is  signed  by  “Peterson”  and  his  attorney,  Davidson,  but  the 
document  is  unsigned  by  “Dennison”  and  his  attorney.  Based  on  my  involvement  in  this 
investigation,  I  believe  that  Davidson  sent  Cohen  this  partially-signed  side  letter  agreement  in 
order— to-facilitate^the^closing-of  a-  deakbetween-Davidson_s  clienCand„Cohen  itL  his  client  on_ 

October  10,  2016. 

19.  It  appears  that  on  October  1 3 , 20 1 6,  and  the  days  that  followed,  Cohen  took 
steps  to  complete  a  transaction  with  Davidson,  including  attempting  to  open  an  account  from  which 
Cohen  could  transfer  funds  to  Davidson.  Specifically,  from  my  review  of  toll  records, 
information  obtained  pursuant  to  the  iCloud  Warrant  and  Cohen  Email  Warrants,  records 
maintained  by  First  Republic  Bank  (“First  Republic”),  as  well  as  my  participation  in  interviews 
with  employees  of  First  Republic,  I  have  learned  the  following; 

a.  On  the  mommg  of  October  13, 2016,  at  8:54  a.m.,  Cohen  sent  Pecker  atext  message 
that  stated:  “I  need  to  talk  to  you.”  At  9:06  a.m..  Pecker  sent  a  text  message  to  Cohen  that  stated, 
“I  called  please  call  me  back.”  The  tolls  between  Cohen  and  Pecker  do  not  show  a  telephone  call 
between  8:54  a.m.  and  9:06  a.m.  However,  based  on  my  review  of  text  messages,.!  have  learned 
that  Cohen  and  Pecker  communicate  with  each  other  over  Signal,  which  is  an  encrypted 
communications  cellphone  application  that  allows  users  to  send  encrypted  text  messages  and  make 
encrypted  calls. 

b.  At  9:23  a.m.,  Cohen  sent  an  email  that  stated  “call  me”  to  a  banker  at  First  Repubhc 
Bank  (“First  Republic  Employee-2”).  The  email  attached  documents  fiom  the  Secretary  of  State 
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of  Delaware  indicating  that  Cohen  had  formed  a  limited  liability  company  called  “Resolution 
Consultants  LLC”  on  September  30, 2016.  As.noted  above,  “Resolution  Consultants”  is  the  name 
of  the  entity  that  Cohen  had  told  Howard  he  had  formed  recently  after  Howard  said  Davidson 
would  “do  it.”  At  10:44  a.m.,  Cohen  called  First  Republic  Employee-2  and  told  him,  in  sum  and 
substance,  that  he  needed  an  account  in  the  name  of  “Resolution  Consultants”  opened  immediately, 
and  that  he  did  not  want  an  address  on  the  checks  mitten  out  of  the  account.  Later  that  day, 
another“employee  aIrFirst  RepublR-emailed  Cohen-account  opening  paperworkjto-complete. 


Cohen  returned  the  account  opening  documents  partially  completed,  but  failed  to  provide  a  copy 
of  his  driver’s  license  or  passport,  and  did  not  respond  to  the  employee’s  question  of  how  he 
wanted  to  fund  the  account.  As  a  result,  the  account  was  never  opened. 

c.  On  October  1 7, 20 1 6,  Cohen  incorporated  Essential  Consultants  LLC  in  Delaware. 
That  same  day,  he  filed  paperwork  to  dissolve  Resolution  Consultants  LLC. 

20.  Despite  these  steps  taken  by  Cohen,  it  appears  that  the  negotiation  between 
Cohen  and  Davidson  was  not  progressing  sufficiently  fast  enough  for  Davidson  or  his  client, 
Clifford,  and  they  threatened  to  go  public  with  Clifford’s  allegations  just  days  before  the 
presidential  election.  Specifically,  based  on  my  review  of  toll  records,  information  obtained 
pursuant  to  the  iCloud  Warrant,  and  public  soui’ces,  I  know  the  following: 

•  a.  According  to  an  article  in  The  Washington  Post,  which  quoted  emails  sent  from 
Cohen’ s  email  account  hosted  by  the  Tmmp  Organization,  on  October  1 7, 20 1 6,  Davidson  emailed 
Cohen  and  threatened  to  cancel  the  aforementioned  “settlement  agreemenf’  by  the  end  of  the  day 
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if  Cohen  did  not  complete  the  transaction.'^  According  to  the  article,  Davidson  sent  Cohen  a 
second  email  later  in  the  day  that  stated  in  part,  “Please  be  advised  that  my  client  deems  her 
settlement  agreement  canceled  and  void.”  At  4:00  p.m.  that  day,  Cohen  called  Davidson  and  they 
spoke  for  over  five  minutes. 

b.  Cohen’s  4:00  p.m.  call  with  Davidson  and/or  Davidson’s  threats  to  cancel  the 
“settlement  agreement”  appear  to  have  touched  off  a  flurry  of  commumcations  about  the  settlement 
agreement  and  whether  Clifford  would  go  public.  Specifically:  _ 

i  At  4:43  p.m.,  Howard  sent  Cohen  a  text  message  that  stated:  “I’m  told 

they’re  going  with  DailyMail.  Are  you  aware?”  One  minute  later,  Cohen  responded:  “Call  me.” 
Based  on  my  involvement  in  this  investigation,  I  understand  Howard’s  text  to  mean  that  he  heard 
that  Clifford  was  going  to  take  her  story  of  an  extramarital  affair  with  Trump  to  the  Daily  Mail,  a 
tabloid  newspaper. 

ii.  At  4:45  p.m.,  Howard  called  Cohen  and  they  spoke  for  over  two  minutes. 
Moments  later,  Davidson  and  Cohen  spoke  for  about  two  minutes. 

iii.  At  5 :03  p.m.,  Cohen  attempted  to  call  Trump,  but  the  call  only  lasted  eight 
seconds.  This  was  Cohen’s  first  call  after  he  spoke  with  Davidson. 

iv.  At  5:25  p.m.,  Cohen  texted  Howard,  stating:  “Well???” 

V.  At  6:44  p.m.,  Howard  responded  to  Cohen’s  text,  stating:  “Not  taking  my 

calls.”  Cohen  responded  one  minute  later:  “You’re  kidding.  Who  are  you  trying  to  reach?”, 
Howard  responded  one  minute  later:  “The  ‘agent.’”  Based  on  my  involvement  in  this 


Due  to  the  partially  covert  nature  of  the  investigation  to  this,  date,  the  USAO  has  not  requested 
documents  fiom  the  Trump  Organization  or  Davidson,  and  thus  does  not  possess  the  email 
referenced  in  this  article. 
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investigation,  I  understand  Howard’s  text  messages  to  mean  that  he  attempted  to  contact  Davidson 
about  the  matter  involving  Clifford,  but  that  Davidson  was  not  taking  Howard’s  calls. 

vi.  At  6:49  p.m.,  Cohen  called  Howard  and  they  spoke  for  nearly  four  minutes. 

c.  The  following  day,  on  October  18,  2016,  TheSmokingGun.com,  a  website  that 
publishes  legal  docunients  and  mugshots,  published  an  article  called:  “Donald  Trump  and  the  Pom 
Superstar,”  which  alleged  that  Trump  had  an  extramarital  affair  with  Clifford.  However,  the 

article-noted  that  Clifford-had-declinecLto  comment.- — ^ - - -  - - — 

21.  On  or  about  October  25,  2016,  the  communications  between  Cohen, 
Davidson,  Howard  and  Pecker  picked  up  again,  apparently  concerning  a  transaction  involving 
Clifford.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the 
Cohen  F.mail  Warrants  and  iCloud  Warrant,  as  well  as  my  review  of  public  sources,  I  have  learned 
the  following: 

a.  On  October  25,  2016,  at  6:09  p.m.,  Howard  sent  Cohen  a  text  message  stating: 
“Keith  calling  you  urgently.  We  have  to  coordinate  something  on  the  matter  he’s  calling  you  about 
or  its  [sic]  could  look  awfully  bad  for  everyone.”  One  minute  later,  Davidson  sent  Cohen  a  text 
message  stating  “Call  me.”  Cohen  and  Davidson  called  each  other  several  times  over  the  next 
half  hour  but  appear  not  to  have  connected.  At  6:42  p.m.,  Cohen  and  Davidson  spoke  for  about 
eight  minutes.  At  7: 1 1  p.m.,  they  spoke  for  another  two  minutes. 

b.  The  next  morning,  on  or  about  October  26, 2016,  at  8:26  a.m.,  Cohen  called  Trump 
and  spoke  to  him  for  approximately  three  minutes.  At  8:34  a.m.,  Cohen  called  Trump  again  and 
connected  for  a  minute  and  a  half 

c.  At  approximately  9:04  a.m.— less  than  thirty  minutes  after  speaking  with  Trump — 
Cohen  sent  two  emails  to  the  person  who  had  incorporated  Resolution  Consultants  and  Essential 
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Consultants  for  liim^  and  stated  “can  you  send  me  asap  the  filing  receipt”  and  then,  in  the  second 
email,  “for  Essential  Consultants  LLC.”  That  person  responded  with  the  filing  receipt  two 
minutes  later  at  9:06  a.m.  and  with  the  certification  of  formation  23  minutes  later,  at  9:27  a.m. 

d.  Shortly  after  that,  Cohen  contacted  a  particular  employee  at  First  Republic  (“First 
Republic  Employee-2”)  and  told  him,  in  sum  and  substance,  that  he  decided  not  to  open  an  account 
in  the  name  of  “Resolution  Consulting”  and  instead  would  be  opening  a  real  estate  consulting 
company  in  the  name  of  “Essential  Consultants.”  Cohen  told  Fifst  Republic  Employee-2  that  he 
was  at  Trump  Tower,  and  wanted  to  go  to  a  First  Republic  branch  across  the  street  to  open  the 
account,  so  First  Republic  Employee-2  called  another  employee  of  First  Republic  (“First  Republic 
Employee-1  ”),  a  preferred  banker  at  that  branch,  to  assist  Cohen.  At  1 1 :00  a.m..  First  Republic 
Employee- 1  called  Cohen.  I  know  from  my  participation  in  an  interview  with  First  Republic 
Employee- 1,  that  around  the  time  of  the  call  he  went  to  Cohen’s  office  in  Trump  Tower — on  the 
same  floor  as  the  Trump  Organization— and  went  through  account  opening  questions,  including 

know  your  customer  questions,  with  Cohen.  In  response  to  a  series  of  kriow-your-customer 

1 

questions  about  the  purpose  of  the  account — ^the  answers  to  which  First  Republic  Employee-1 
entered  into  a  form— Cohen  stated,  in  sum  and  substance,  that  he  was  opening  Essential 
Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting  work, 
and  all  of  his  consulting  chents  would  be  domestic  individuals  based  in  the  United  States.  Based 
on  my  review  of  records  obtained  from  First  Republic,  it  appears  that  ftiis  account  (the  “Essential 
Consultants  Accounf ’)  was  created  at  a  time  between  1 1 :00  a.m.  and  1 :00  p.m. 

e.  At  1:47  p.m.,  Cohen  called  Davidson  and  they  spoke  for  approximately  two 

minutes.  At  approximately  1:49  p.m.,  Davidson  emailed  Cohen  wiring  instructions  for  an 

attorney  client  trust  account  at  City  National  Bank. 
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f.  After  the  Essential  Consultants  Account  was  opened  on  October  26,  2016,  Cohen 
transferred  $131,000  ftom  a  home  equity  line  of  credit  that  Cohen  had  at  First  Republic  to  the 
Essential  Consultants  Account.  Following  the  transfer,  at  approximately  4:15  p.m.  on  October 
26,  2016,  First  Republic  Employee-2’s  assistant  emailed  Cohen  at  his  Trump  Organization  email 
address  to  tell  him  that  the  funds  had  been  deposited  into  the  Essential  Consultants  Account. 
Cohen  forwarded  that  email  to  the  Cohen  Gmail  Account  and  then  forwarded  it  to  Davidson. 

^ At  6737  pTmTrCqhemasked-Peeker-byjtejft-messagej -Gan^vyq;Speak?-Important4^ 
Cohen  called  Pecker  at  6:49  p.m.  and  connected  for  thirty  seconds.  At  6:57  p.m.,  Cohen  sent 
Howard  a  text  message,  stating:  “Please  call  me.  Important.”  Cohen  called  Howard  at  7:00  p.m. 
and  connected  for  about  thirty  seconds.  At  7:06  p.m.,  Cohen  called  Pecker  again  and  they  spoke 
for  nearly  thirteen  minutes.  At  7:24  p.m.,  Howard  sent  a  text  message  to  Cohen  that:  “He  said 
he’d  call  me  back  in  20  minutes.  I  told  him  what  you  are  asking  for  his  [sic]  reasonable.  I’ll  get 
it  sorted.”  Approximately  an  hour  later,  at  8:23  p.m.,  Howard  told  Cohen  by  text  message  to 
“check  your  Gmail  for  email  from  my  private  account.”  In  an  email  sent  at  8:23  p.m.  by  Howard 
to  Cohen  and  Davidson,  with  the  subject  Ime  “Confirmation,”  Howard  stated,  “Thank  you  both 
for  chatting  with  me  earlier.  Confirming  agreement  on:  -  Executed  agreement,  hand-signed  by 
Keith’s  client  and  returned  via  overnight  or  same-day  FedEx  to  Michael,  -  Change  of  agreement 
to  reflect  the  con-ect  LLC,  -  Transfer  of  funds  on  Thursday  AM  to  be  held  in  escrow  until  receipt 
of  agreement.”  After  receivmg  that  email,  at  approximately  8:27  p.m.,  Cohen  asked  Howard  by 
text  message,  “Can  you  and  David  [Pecker]  give  me  a  call.”  Howard  promptly  responded:  “David 
is  not  ai-ound  I  think.  I’ll  call.”  At  8:28  p.m.,  Howard  called  Cohen  and  they  spoke  for  three 
minutes. 
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22.  On  October  27,  2016,  Cohen  made  a  payment  to  Davidson  of  $130,000 — 
with  the  funds  intended  for  Clifford— for  the  purpose  of  securing  her  ongoing  silence  with  respect 
to  the  allegations  that  she  had  an  extramarital  affair  with  Trump.  Specifically,  based  on  my 
review  of  toll  records,  hank  records,  and  information  obtained  pursuant  to  the  iCloud  Warrant  and 
Cohen  Email  Warrants,  I  have  learned  the  following: 

a.  At  9:47  a.m.,  Cohen  sent  Davidson  an  email,  stating:  “Keith,  kindly  confirm  that 

the-wire-receive(lfoday,-Octoben27,z20T6_shallJbe  held  by^youirLyom  attortigy_s_husf account 

until  such  time  as  directed  for  release  by  me,  in  writing.  Additionally,  please  ensure  that  all 
paperwork  contains  the  correct  name  of  Essential  Consultants  LLC.  I  thank  you  in  advance  for 
your  assistance  and  look  forward  to  hearing  from  you  later.” 

b.  At  approximately  10:01  a.m.,  according  to  records  provided  by  First  Republic 
Bank,  Cohen  completed  paperwork  to  wire  $130,000  from  the  Essential  Consultants  Account^ — 
which  had  been  funded  a  day  prior  from  Cohen’ s  home  equity  line  of  credit — ^to  the  attorney  client 
trust  account  at  City  National  Bank  that  Davidson  had  specified  in  the  wiring  instructions  he  sent 
to  Cohen.  The  wire  transfer  was  made  shortly  thereafter. 

c.  At  10:02  a.m.,  Davidson  responded  to  Cohen’s  email  from  9:47  a.m.,  stating:  “I 
confirm  that  I  will  work  in  good  faith  &  that  no  funds  shall  be  disbursed  unless  &  until  the  plaintiff 
personally  signs  all  necessary  settlement  paperwork,  (the  form  of  which  will  match  the  prior 
agreement).  The  settlement  docs  will  name  the  correct  corporation,  (Essential  Consultants  LLC). 
Plaintifif’s  signature  will  he  notarized  and  returned  to  you  via  FedEx.  Only  after  you  receive  FedEx 
will  I  disburse.  Fair?” 

d.  At  10:50  a.m..  First  Republic  Employee-1  sent  Cohen  an  email  confirming  that  the 
payment  had  been  sent  and  providing  him  with  the  wire  number. 
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23.  On  October  28,  2016,  and  the  days  that  followed,  Cohen  finalized  the 
transaction  with  Davidson.  Specifically,  based  on  my  review  of  toll  records,  information  obtained 
pursuant  to  the  iCloud  Warrant,  public  sources,  and  bank  records,  I  know  the  following: 

a.  On  October  28, 2016,  at  1 1 :48  a.m.,  Cohen  spoke  to  Trump  for  approximately  five 
minutes.  Beginning  at  1:21  p.m.,  Cohen  attempted  a  series  of  phone  calls  to  Davidson,  Pecker, 
and  Howard  throughout  the  day,  although  it  appears  he  may  only  have  connected  with  Howard. 

— — - ^br—Later-that-dayy-at-  appro^mately-TiOl— prmT^Davidson  stated^to-Gohen  by-text-^ 

message  that  “all  is  AOK.  I  should  have  signed,  notarized  docs  on  Monday.  You  should  have 
them  on  Tuesday.”  Cohen  thanked  him  and  said  “I  hope  we  are  good.”  Davidson  responded,  “I 
assure  you.  We  are  very  good.”  Howard  also  texted  Cohen  at  7:08  p.m.,  “Keith  [Davidson]  says 
we  are  good.”  Cohen  then  responded  “OK”  to  Howard  and  “Excellenf’  to  Davidson.  At 
approximately  10:30  p.m.,  Cohen  spoke  to  Hicks  for  three  minutes. 

c.  On  October  31,  2016,  Cohen  called  Howard  at  8:22  p.m.  and  they  spoke  for  over 
three  minutes.  At  8:32  p.m.,  Cohen  received  text  messages  from  both  Howard  and  Davidson. 
Howard  said:  “You’ll  have  paperwork  tomorrow  says  KD.”  Davidson  said:  “We  are  AOK.  You 
will  be  receiving  a  package  tomorrow.”  Cohen  responded  “Thank  you”  to  Howard  and  “Thanks 
Keith.  Will  call  you  then”  to  Davidson.  From  my  involvement  in  this  investigation,  I  believe 
Davidson  was  referring  to  a  signed  nondisclosure  agreement  when  he  told  Cohen  that  he  would 
receive  a  package. 

d.  Based  on  my  review  of  court  filings  that  became  public  in  20 1 8, 1  have  learned  that 
on  or  about  October  28,  2016,  “EC,  EEC  and/or  David  Dennison”  entered  mto  a  “confidential 
settlement  agreement  and  mutual  relea:se”  with  “Peggy  Peterson,”  pursuant  to  which  “Peterson” 
agreed  not  to  disclose  certain  “confidential  information  pertaining  to  [Dennison]”  in  exchange  for 
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$130,000.  The  agreement  provided  that  “EC,  LLC”  would  wire  the  funds  to  “Peterson’s”  I 

f 

attorney,  who  would  then  transfer  funds  to  “Peterson.”  Cohen  signed  the  agreement  on  behalf  of  \ 

I 

“EC,  LLC.”  Theagreementstatedtotheaddressfbr  “EC,  LLC,”  which  was  later  referred  to  in  j 

I 

i 

the  agreement  as  “Essential  Consultants,  LLC,”  was  Cohen’s  residence.  | 

’  '  f 

e.  Consistent  with  the  “confidential  settlement  agreement  and  mutual  release,”  on  or  ^ 

about  November  1,  2016,  Davidson  transferred  $96,645  from  his  attorney  client  trust  account  at 
City  National  Bank  to  a  bank  account  in  Clifford’s  name.  The  wire  had  the  annotation  “net   j 

settlement.”  On  the  same  day,  at  approximately  9:48  a.m.  Davidson  sent  Cohen  a  text  message  : 

with  a  picture  of  a  FedEx  delivery  confirmation,  stating  that  at  approximately  9:09  a.m.  a  package  j 

j 

shipped  by  Davidson  the  previous  day  had  arrived  for  Cohen  at  his  Trump  Organization  [ 

i‘ 

address.  On  the  same  day,  at  approximately  6:14  p.m.,  Davidson  sent  Cohen  an  email  with  an  i 

audio  file  attached  and  said  “Give  this  a  lesson  [sic]  and  then  call  me.”  The  audio  attachment  was  | 

titled  “Stormy .mp3”  and  was  a  five-minute  recording  of  Davidson  interviewing  Clifford  about 

recent  public  allegations  made  by  an  adult  film  star  named  Jessica  Drake  regarding  her  alleged 

past  affair  with  Trump;  in  the  recording,  Clifford  explained  the  reasons  she  believed  that  Drake 

was  not  credible.  Less  than  an  hour  later,  at  approximately  7:05  p.m.,  Cohen  called  Trump,  but 

it  appears  that  they  did  not  connect.  Cohen  then  called  a  telephone  number  belonging  to 

Kellyanne  Conway,  who  at  the  time  was  Trump’ s  campaign  manager.  They  did  not  connect.  At 

approximately  7:44  p.m.,  however,  Cohen  received  a  return  call  from  Conway,  which  lasted  for 

approximately  six  minutes. 

24.  On  November  4,  2016,  just  three  days  after  the  Clifford  transaction  was 

completed  and  just  four  days  before  the  presidential  election,  the  Wall  Street  Journal  published  an 

article  alleging  that  the  National  Enquirer  had  “Shielded  Donald  Trump”  from. allegations  by. 
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Playboy  model  Karen  McDougal  that  she  and  Trump  had  an  affair.  The  article  alleged  that  AMI 
had  agreed  to  pay  McDougal  to  bury  her  story.  McDougal,  Idee  Clifford,  had  been  represented 
by  Davidson.  Based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen . 
Email  Warrants  and  iCloud  Warrant,  and  public  sources,  it  appears  that  Cohen  spoke  frequently 
to  Davidson,  Howard,  Pecker,  and  Hicks  around  the  time  of  this  article’s  publication — -just  days 
before  Election  Day — about  the  importance  of  preventing  the  McDougal  and  Clifford  stories  from 


gaining  nationaktractionT— Specifically^  I  have Teamed  theTollowing™ 


a.  Between  4:30  and  8:00  p.m.  on  November  4,  Cohen  communicated  several  times 

with  Howard,  Pecker  and  Davidson.  For  instance,  at  approximately  4:49  p.m.,  Cohen  sent 

Howard  a  text  message  with  a  screenshot  of  an  email  forwarded  to  him  by  another  Trump 

Organization  lawyer.  The  forwarded  email  was  from  a  Wall  Street  Journal  reporter,  and  asked  for 

comment  from  Trump  and/or  the  campaign  on  the  story.  Cohen  also  spoke  with  Hicks  several 

\ 

times,  rncludmg  shortly  before  and/or  after  calls  with  Pecker,  Howard  and  Davidson.  Indeed,  at 
approximately  7:33  p.m.,  using  two  different  cellphones  subscribed  to  him,  Cohen  appears  to  have 
been  talking  to  Davidson  and  Hicks  at  the  same  time. 

b.  At  approximately  8:51  p.m.,  Cohen  sent  Howard  a  message,  stating;  “She’s  being 

really  difficult  with  giving  Keith  a  statement.  Basically  went  into  hiding  and  uoreachable.”  One 

minute  later,  Howard  responded:  “I’ll  ask  him  again.  We  just  need  her  to  disappear.”  Cohen 

responded,  “She  definitely  disappeared  but  refuses  to  give  a  statement  and  Keith  carmot  push  her.” 

At  approximately  8:55  p.m.,  Howard  responded  to  Cohen’ s  text:  “Let’s  let  the  dust  settle.  We  don’t 

want  to  push  her  over  the  edge.  She’s  on  side  at  present  and  we  have  a  solid  position  and  a  plausible 

position  that  she  is  rightfully  employed  as  a  columnist.”  Based  on  my  involvement  in  this 

investigation,  I  believe  Cohen  and  Howard  were  referring  to  Karen  McDougal  when  they  were 
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discussing  “she”  and  “her.”  Additionally,  I  believe  Howard’s  statement  that  “we  have  ...  a 
plausible  position  that  she  is  rightfully  employed  as  a  columnist”  was  a  reference  to  the  fact  that 
AMI  had  given  McDougal  payments  for  her  role  as  a  purported  columnist  for  the  company. 

c.  At  approximately  8:58  p.m.  on  November  4,  2016,  Howard  attempted  to  reassure 
Cohen  about  the  effect  of  the  forthcoming  Wall  Street  Journal  article,  texting,  “I  think  it’ll  be  ok 
pal.  I  think  it’ll  fade  into  the  distance.”  Cohen  responded,  “He’ s  pissed.”  Howard  wrote  back, 
“I’m  pissH'  Vnn ’re  pissed  Pecker  is  pi ssed.  Keith  is  pissed.  Not  much  we  can  do.”  Based 
on  my  involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  Trump  when  he  stated 
“he’s  pissed.”  Cohen  asked  Howard  at  approximately  9:00  p.m.  how  the  Wall  Street  Journal 
could  publish  its  article  if  “everyone  denies.”  Howard  responded,  “Because  there  is  the  payment 
from  AMI.  It  looks  suspicious  at  best.” 

d.  At  approximately  9:03  p.m.,  Hicks  called  Cohen  and  they  spoke  for  two  minutes. 
At  approximately  9:11  p.m.,  Cohen  called  Howard  and  spoke  to  him  for  five  minutes.  At 
approximately  9:15  p.m.,  Hicks  called  Cohen  and  they  spoke  for  nearly  seven  minutes.  Again, 
Cohen  used  different  phones  for  these  two  calls,  such  that  he  appears  to  have  been  on  both  calls 
for  about  a  minute  of  overlap.  At  approximately  9:32  p.m.,  Cohen  texted  Pecker,  “The  boss  just 
tried  calling  you.  Are  you  free?”  A  minute  later,  Cohen  texted  Howard,  “Is  there  a  way  to  find 
David  quickly?” 

e.  At  approximately  9:50  p.m.,  the  Wall  Street  Journal  article  was  published  online. 
Howard  and  Hicks  both  sent  web  links  for  the  article  to  Cohen.  Over  the  next  half  hour,  Cohen 
and  Howard  exchanged  several  text  messages  commenting  on  how  the  story  came  across. 
The  next  morning  on  November  5, 2016,  at  approximately  7:35  a.m.,  Cohen  texted  Hicks,  “So  far 
I  see  only  6  stories.  Getting  little  to  no  traction.”  Hicks  responded,  “Same.  Keep  praying!  1  It’s 
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working!”  Cohen,  wrote  back,  “Even  CNN  not  talking  about  it.  No  one  believes  it  and  if 
necessary,  I  have  a  statement  by  Storm  denying  everything  and  contradicting  the  other  porn  stars 
statement.  I  wouldn’t  use  it  now  or  even  discuss  with  him  as  no  one  is  talking  about  this  or  cares!” 
Based  on  my  involvement  in  this  investigation,  T  believe  Cohen  was  referring  to  the  above- 
referenced  recorded  audio  statement  by  Clifford  that  he  obtained  from  Davidson,  and  was  stating 
that  such  a  statement  could  be  used  to  influence  potential  negative  media  relating  to  Trump,  but 
was^unneeess^y  af  that  time— Based  on  a  texCmessage-from  Hicl^  to  Gohen,-Tbelieye-that”later 


that  morning.  Pecker  spoke  to  Tiump. 

25.  On  or  about  November  8,  2016,  Trump  won  the  election  for  President  of 
the  United  States. 

26.  On  or  about  January  12,  2018,  the  Wall  Street  Journal  first  reported  that 
Cohen  arranged  a  payment  to  Clifford.  On  or  about  January  22,  2018,  Common  Cause,  a 
government  watchdog  group,  filed  a  complaint  with  the  Federal  Election  Commission,  alleging 
that  Cohen  had  violated  campaign  finance  laws  by  making  the  payment  to  Clifford.  Based  on  my 
review  public  sources  following  that  report,  as  well  as  emails  obtained  pursuant  to  the  Cohen  Email 
Warrants,  I  have  learned  the  following: 

a.  On  or  about  January  23,  2018,  the  day  after  Common  Cause  filed  its  complaint, 

Cohen  began  emailing  himself  drafts  of  statements  describing  his  payment  to  Clifford. 

Additionally,  on  January  23,  2018,  Cohen  emailed  the  following  draft  of  that  statement  to  an 

individual  who  appears  to  be  writing  a  book  on  Cohen’s  behalf: 

In  October  2016, 1  was  contacted  by  coimsel  for  Ms.  Clifford  stating  that 
news  outlets,  including  ABC  news,  were  pursuing  the  2011  story  of  an' 
alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.  Despite  the  fact  that 
both  parties  had  already  denied  the  allegation,  as  Mr.  Trump’s  longtime 
special  counsel  and  protector,  I  took  it  upon  myself  to  match  the  offer  and 
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keep  the  story  from  breaking.  I  knew  the  allegation  to  be  false,  but  I  am 
also  a  realist  who  understands  that  just  because  something  is  false  doesn ’t 
mean  that  it  doesn ’t  create  harm  and  damage.  I  could  not  allow  this  to 
occur.  I  negotiated  a  non-disclosure  agreement  with  Ms.  Clifford’s 
counsel  and  tendered  the  funds.  I  did  this  through  my  Delaware  LLC  and 
transferred  personal  funds  to  cover  the  agreement.  I  was  not  reimbursed 
any  monies  from  Mr.  Trump,  the  Trump  Organization,  any  third  party  or 
the  Presidential  campaign.  At  no  point  did  I  ever  advise  Mr.  Trump  of  my 
communications  or  actions  regarding  this  agreement.  As  outlandish  and 
unusual  as  this  may  appear,  the  Trumps  have  been  like  family  to  me  for 
over  a  decade.  If  s  what  you  do  for  family. 


(Emphasis  added .)  Rased  on  my  involvement  in  this  investigation,  I  believe  that  the  above  email 
is  an  acknowledgement  that  the  allegation  of  the  affair  had  existed  for  some  time  (“...the  2011 
story...”),  but  that  Cohen  was  motivated  to  “keep  the  story  from  breaking”  again  in  October  2016. 

b.  On  or  about  February  13,  201 8,  Cohen  said  in  a  statement  to  The  New  York  Times 
that  “Neither  the  Trump  Organization  nor  the  Trump  campaign  was  a  party  to  the  transaction  with 
Ms.  Clifford.  The  payment  to  Ms.  Clifford  was  lawful,  and  was  not  a  campaign  contribution  or  a 
campaign  expenditure  by  anyone.”  Cohen  declined  to  answer  follow-up  questions  including 
whether  Trump  had  been  aware  of  the  payment,  why  Cohen  made  the  payment,  or  whether  similar 
payments  had  been  made  to  other  people. 

c.  On  or  about  Febmary  14,  2018,  Cohen  was  asked  by  The  New  York  Times  whether 
Trump  had  reimbursed  him,  whether  he  and  Trump  had  made  any  arrangement  at  the  tinie  of  the 
payment,  or  whether  he  had  made  payments  to  other  women.  Cohen  stated  in  response,  “I  can’t 
get  into  any  of  that.”  On  or  about  February  14,  2018,  Cohen  also  stated  to  The  Washington  Post 
that:  “In  a  private  transaction  in  2016,  I  used  my  own  personal  funds  to  facilitate  a  payment  of 
$130,000  to  Ms.  Stephanie  Clifford.  Neither  the  Trump  Organization  nor  the  Trump  campaign 
was  a  party  to  the  transaction  with  Ms.  Clifford,  and  neither  reimbursed  me  for  the  payment,  either 
directly  or  indirectly.” 
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d.  On  or  about  March  9, 20 1 8,  Cohen  stated  to  ABC  News  that  “the  funds  were  taken 
from  my,  home  equity  line  and  transferred  internally  to  my  LLC  account  in  the  same  bank.” 

27.  For  the  foregoing  reasons,  there  is  probable  cause  to  believe  that  Cohen 
committed  the  Subject  Offense  by  making  an  in-kind  contribution  to  Trump  or  the  Trump 
campaign  in  the  form  of  a  $130,000  payment  to  Clifford  on  the  electioix,  Indeed,  while  Cohen 
denies  having  given  an  unlawful  contribution,  in  his  own  statements  Cohen  has  admitted  that  he 
-paid-$T30;OOO  oThis-^personaTfunds”  to  Gliffor^and^that  the  paymenCOccurred-less-than  tWo 
weeks  before  the  election,  as  Tnamp  was  facing  negative  media  allegations  about  his  behavior 
toward  women,  even  though  allegations  of  an  affair  between  Trump  and  Clifford  existed  since 
2011. 

28.  I  have  rewewed  records  maintained  by  AT&T,  from  which  I  have  learned, 
in  substance  and  in  part,  that  the  Target  Cellular  Devices  are  still  active.  Based  on  my  training 
and  experience,  my  familiarity  with  this  investigation,  and  the  information  set  forth  above,  I 
therefore  beheve  that  the  requested  data  will  lead  to  evidence  of  the  Subject  Offense. 
Specifically,  information  will  lead  to  the  present  location  of  the  Target  Cellular  Devices;  law 
enforcement  may  then  obtain  evidence  from  the  Target  Cellular  Devices,  by  subpoena  or  search 
warrant,  including  but  not  limited  to  contact  lists  containing  contact  information  for  participants 
in  the  illegal  campaign  contribution  scheme  and  well  as  text  messages  between  these  participants. 

MANNER  OF  EXECUTION 

29.  .  In  my  training  and  experience,  I  have  learned  that  cellular  phones  and  other 

cellular  dcAuces  communicate  wirelessly  across  a  network  of  cellular  infrastracture,  including 

towers  that  route  and  coimect  individual  communications.  When  sending  or  receiving  a 

communication,  a  cellular  device  broadcasts  certain  cellular  and  wifi  signals  to  the  cellular  tower 
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that  is  routing  its  communication.  These  cellular  and  wifi  signals  include  a  cellular  device’s 
unique  identifiers. 

30.  To  facilitate  execution  of  this  warrant  to  determine  the  location  of  the  Target 
Cellular  Devices,  law  enforcement  may  use  an  investigative  device  or  devices  capable  of 
broadcasting  cellular  and  wifi  signals  that  will  be  received  by  the  Target  Cellular  Devices  or 
receiving  cellular  and  wifi  signals  from  nearby  cellular  devices,  including  the  Target  Cellular 
Devices. .  Such  a  device  may  fimction  in  some  respects  like  a  cellular  tower,  except  tha.t  it  will  not 

be  connected  to  the  cellular  network  and  cannot  be  used  by  a  cell  phone  to  commumcate  with 
others.  The  device  may  send  a  signal  to  the  Target  Cellular  Devices  and  nearby  cellular  devices 
and  thereby  prompt  them  to  send  cellular  and  wifi  signals  that  include  the  unique  identifier  of  the 
device.  Law  enforcement  may  monitor  the  cellular  and  wifi  signals  broadcast  by  the  Target 
Cellular  Devices  for  non-content  signal  information  and  use  that  information  to  determine  the 
Target  Cellular  Devices’  location,  even  if  it  is  located  inside  a  house,  apartment,  or  other  building. 
The  device  will  not  intercept  the  contents  of  the  Target  Cellular  Devices’  communications,  such 
as  telephone  calls,  text  messages,  and  other  electronic  communications.  Further,  the  device  will 
not  collect  any  other  data  stored  on  the  Target  Cellular  Devices,  including  e-mails,  text  messages, 
contact  lists,  images,  or  Global  Positiordng  System  (GPS)  data. 

31.  The  investigative  device  may  interrupt  cellular  service  of  phones  or  other 

cellular  devices  within  its  immediate  vicinity.  Any  service  disruption  to  non-target  devices  will 

be  brief  and  temporary,  and  all  operations  will  attempt  to  limit  the  interference  with  such  devices. 

In  order  to  connect  with  the  Target  Cellular  Devices,  the  device  may  briefly  exchange  cellular  and 

wifi  signals  with  all  phones  or  other  cellular  devices  in  its  vicinity  to  determine  whether  those 

devices’  unique  identifiers  match  the  identifiers  of  the  Target  Cellular  Devices.  These  cellular 

24 


Case  l:18-cr-00602-WHP  Document  48-8  Filed  07/18/19  Page  56  of  62 


and  wifi  signals  may  include  cell  phone  identifiers.  The  device  will  not  complete  a  connection 
with  cellular  devices  determined  not  to  be  the  Target  Cellular  Devices,  and  law  enforcement  will 
limit  collection  of  information  from  devices  other  than  the  Target  Cellular  Devices.  To  the  extent 
that  any  information  from  a  cellular  device  other  than  the  Target  Cellular  Devices  is  collected  by 
the  law  enforcement  device,  law  enforcement  will  delete  that  information,  and  law  enforcement 
will  make  no  investigative  use  of  it  absent  further  order  of  the  court,  other  than  distinguishing  the 

^argeTCellular-Deyiees-from  alTother  eellukr-devieesi - . ’ . . — - - 

AUTHORIZATION  REQUEST 

32.  Based  on  the  foregoing,  I  request  that  the  Court  issue  the  proposed  search 
warrant,  pursuant  to  Federal  Rule  of  Criminal  Procedure  41.  The  proposed  warrant  also  will 
function  as  apen  register  order  under  18  U.S.C.  §  3123. 

33.  I  further  request,  pursuant  to  18  U.S.C.  §  3103a(b)  and  Federal  Rule  of 
Criminal  Procedure  41(f)(3),  that  the  Court  authorize  the  officer  executing  the  warrant  to  delay 
notice  until  30  days  from  the  end  of  the  period  of  authorized  surveillance.  This  delay  is  justified 
because  there  is  reasonable  cause  to  believe  that  providing  immediate  notification  of  the  warrant 
may  have  an  adverse  result,  as  defined  in  18  U.S.C.  §  2705.  Providing  immediate  notice  to  the 
subscriber  or  user  of  the  Target  Cellular  Devices  would  seriously  jeopardize  the  ongoing 
investigation,  as  such  a  disclosure  would  give  that  person  an  opportunity  to  destroy  evidence, 
change  patterns  of  behavior,  and  notify  confederates.  See  18  U.S.C.  §  3103a(b)(l).  There  is 
reasonable  necessity  for  the  use  of  the  technique  described  above,  for  the  reasons  set  forth  above. 

18  U.S.C.  §3103a(b)(2). 
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34.  I  further  request  that  the  Court  authorize  execution  of  the  warrant  at  any 
time  of  day  or  night,  owing  to  the  potential  need  to  locate  the  Target  Cellular  Devices  outside  of 
daytime  hours. 


35.  I  further  request  that  the  Court  order  that  all  papers  in  support  of  this 
application,  including  the  affidavit  and  search  warrant,  be  sealed  until  further  order  of  the  Court. 
These  documents  discuss  an  ongoing  criminal  investigation  that  is  neither  public  nor  known  to  all 
of  the  targets  of  the  investigation.  Accordingly,  there  is  good  cause  to  seal  these  documents 
because  their  premature  disclosure  may  seriously  jeopardize  that  investigation. 

36.  A  search  warrant  may  not  be  legally  necessary  to  compel  the  investigative 
technique  described  herein.  Nevertheless,  I  hereby  submit  this  warrant  application  out  of  an 
abundance  of  caution. 


Respectfully  submitted. 


f  ederal  Bureau  of  investigation 


Subscribed  and  sworn  to  before  me 
On: 


UNITED  STATES  MAGISTRATE  JUDGE 
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IN  THE  UNITED  STATES  DISTRICT  COURT 
FOR  THE  SOUTHERN  DISTRICT  OF  NEW  YORK 

Case  No. _ 

Filed  Under  Seal 

WARRANT  AND  ORDER  OF  AUTHORIZATION 

TO:  Special  Agents  of  the  Federal  Bureau  of  Investigation  and  Other  Authorized 

■PersonEreU"'^  ‘  '''' 

L  Findings 

The  Court  hereby  finds: 

1.  Upon  an  affidavit  of  Special  Agent  the  Federal  Bureau  of 

Investigation  (“Affidavit”)  and  pursuant  to  Federal  Rule  of  Criminal  Procedure  41,  there  is 
probable  cause  to  believe  that  violations  of  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l) 
(illegal  campaign  contributions)  (the  “Subject  Offense”)  have  been  committed  by  Michael  Cohen 
(the  “Target  Subject”),  and  that  the  Target  Subject  uses  cellular  devices  assigned  call  numbers 

(“Target  Cellular  Devices”),  which  are  described  in 
Attachment  A.  Further,  there  is  probable  cause  to  believe  that  the  location  of  the  Target  Cellular 
Device  will  constitute  evidence  of  the  Subject  Offense.  Specifically,  there  is  probable  cause  to 
believe  that  the  location  of  the  Target  Cellular  Devices  will  constitute  evidence  of  those  criminal 
violations,  including  leading  to  the  location  of  the  Target  Cellular  Devices,  on  which  there  is 
probable  cause  to  beheve  evidence  of  these  offenses  exist,  as  detailed  below. 

2.  Pursuant  to  18  U.S.C.  §  3123(b)(1),  the  Government  has  certified  that  the  pen 
register  information  for  the  Target  Cellular  Devices  is  relevant  to  an  ongoing  investigation  by  the 


IN  THE  MATTER  OF  THE  USE  OF  A  CELL- 
SITE  SIMULATOR  TO  LOCATE  THE 
CELLULAR  DEVICES  ASSIGNED  CALL 
NUMBERS 
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Investigating  Agency  of  the  Target  Subject  and  others  unknown  in  connection  with  suspected 
violations  of  the  Subject  Offense. 

NOW,  THEREFORE,  pursuant  to  Fed.  R.  Crim.  P.  41,  18  U.S.C.  §§  3121  etseq.,  and  18 
U.S.C.  §■  3103a,  IT  IS  HEREBY  ORDERED: 
n.  Warrant  and  Order  of  Authorization 

3.  Warrant.  Law  enforcement  agents  and  other  authorized  law  enforcement 

offieials-are^hereby  authorizeddo-employ-an-electroniainvestigative  technique,  which  is  described, 

in  Attachment  B,  to  the  determine  the  location  of  the  Target  Cellular  Devices,  which  are  described 
in  Attachment  A. 

4.  Data  Collection  and  Retention.  In  the  course  of  employing  the  technique,  law 
enforcement  agents  and  other  authorized  law  enforcement  officials  (a)  must  make  reasonable 
efforts  to  limit  interference  with  cellular  devices  other  than  the  Target  Cellular  Devices,  (b)  must 
promptly  delete  information  collected  from  cellular  devices  other  than  the  Target  Cellular  Devices 
once  the  Target  Cellular  Devices  is  located,  and  (c)  are  prohibited  from  using  data  acquired  beyond 
that  necessary  to  locate  the  Target  Cellular  Devices,  absent  further  order  of  the  Court. 

5.  Delayed  Notice.  Pursuant  to  1 8  U.S.C.  §  3 1 03a(b)  and  Federal  Rule  of  Criminal 
Procedure  41(f)(3),  the  Court  authorizes  the  officer  executing  the  warrant  to  delay  in  notice  until 
30  days  firom  the  end  oLthe  period  oLauthorized  surveillance.  This  delay  is  justifiecLbecause 
there  is  reasonable  cause  to  believe  that  providing  unmediate  notification  of  the  warrant  may  have 
an  adverse  result,  as  defined  in  18  U.S.C.  §  2705.  Providing  immediate  notice  to  the  subscriber 
or  user  of  the  Target  Cellular  Devices  would  seriously  jeopai'dize  the  ongoing  investigation,  as 
such  a  disclosure  would  give  that  person  an  oppoitunity  to  destroy  evidence,  change  patterns  of 
behavior,  and  notify  confederates.  See  18  U.S.C.  §  3103a(b)(l).  There  is  reasonable  necessity 
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for  the  use  of  the  technique  described  above,  for  the  reasons  set  forth  above.  See  18  U.S.C.  § 
3103a(b)(2). 

6.  Time  of  Execution.  The  Court  authorizes  execution  of  this  Warrant  at  any  time 
of  day  or  night,  owing  to  the  potential  need  to  locate  the  Target  Cellular  Devices  outside  of  da5rtime 
hours. 

7.  Sealing.  This  Warrant  and  Order,  and  the  supporting  Agent  Affidavit,  shall  be 
sealed-until-further-order  ofithe^CourV  except  that  the  Government  may-withoutTurther~order~oT 
this  Court:  provide  copies  of  the  Warrant  and  Order  or  the  supporting  Application  and  Agent 
Affidavit  as  need  he  to  personnel  assisting  the  Government  in  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure 
obligations  in  any  prosecutions  related  to  this  matter. 

Dated:  New  York,  New  York 


Time  Issued 


UNITED  STATES  MAGISTRATE  JUDGE 
S  outhem  District  of  New  Y ork 


s/  (g|7T^A<sJ 
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ATTACHMENT  A 

This  warrant  authorizes  the  use  of  the  electronic  investigative  technique  described  in 
Attachment  B  to  identify  the  location  of  the  cellular  devices  assigned  phone  numbers 
^^^^^^^^^^■whose  wireless  provider  is  AT&T,  and  whose  hsted  subscriber  is  Michael 


Cohen. 
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ATTACHMENT  B 

Pursxiant  to  an  investigation  of  Michael  Cohen  for  a  violation  of  52  U.S.C.  §§ 
30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions)  (the  “Subject  Offense”), 
this  Warrant  authorizes  the  officers  to  whom  it  is  directed  to  determine  the  location  of  the  cellular 
devices  identified  in  Attachment  A  by  collecting  and  examining: 

1.  radio  cellular  and  wifi  signals  emitted  by  the  target  cellular  device  for  the  purpose  of 
y  '  ~jro~mmimrcatTng^wjthmeelhilar  infrastructuTe7yincluding  towers^thaf  route"~and  connect 

individual  communications;  and 

2.  radio  cellular  and  wifi  signals  emitted  by  the  target  cellular  device  in  response  to  radio 
cellular  and  wifi  signals  sent  to  the  cellular  device  by  the  officers; 

for  a  period  of  thirty  days,  during  all  times  of  day  and  night.  This  warrant  does  not  authorize  the 
interception  of  any  telephone  calls,  text  messages,  other  electronic  communications,  and  this 
warrant  prohibits  the  seizure  of  any  tangible  property.  The  Court  finds  reasonable  necessity  for 
the  use  of  the  technique  authorized  above.  See  18  U.S.C.  §  3103a(b)(2). 
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U.S.  Department  of  Justice 

United  States  Attorney 
Southern  District  of  New  York 


The  Silvio  J.  Mollo  Building 
One  Saint  Andrew ’s  Plaza 
New  York,  New  York  10007 


July  15,  2019 


EX  PARTE  and  UNDER  SEAL 

BY  EM  ATT,  and  HAND 
The  Honorable  William  H.  Pauley  III 
United  States  District  Judge 
Southern  District  of  New  York 
500  Pearl  Street 
New  York,  NY  10007 

Re:  United  States  v.  Michael  Cohen,  18  Cr.  602  (WHP) 

Dear  Judge  Pauley: 

Pursuant  to  the  Court’s  February  7,  2019  opinion  and  order  (the  “Order”)  and  May  21, 
2019  order,  the  Government  respectfully  submits  this  sealed,  ex  parte  status  report  explaining  the 
need  for  continued  redaction  of  the  materials  subject  to  the  Order.  {See  Order  at  30). 

By  way  of  background,  several  media  organizations  filed  a  request  to  unseal  the  affidavits, 
warrants,  and  riders  associated  with  several  different  searches  that  were  conducted  in  connection 
with  a  grand  jury  investigation  into  Michael  Cohen  and  others  (the  “Materials”).  The  Government 
opposed  that  request,  citing  the  need  to  protect  an  ongoing  investigation  and  the  personal  privacy 
of  certain  individuals  named  in  the  Materials.  On  February  7,  2019,  this  Court  granted  the  motion 
in  part  and  denied  it  in  part.  Although  the  Court  directed  that  certain  parts  of  the  Materials  be 
unsealed  (with  limited  redactions  to  protect  privacy  interests),  the  Court  denied  the  motion  to 
unseal  all  of  the  Materials.  Relevant  here,  the  Court  held  that  “the  portions  of  the  Materials  relating 
to  Cohen’s  campaign  finance  crimes  shall  be  redacted”  to  protect  the  ongoing  law  enforcement 
investigation.  (Order  at  11).  On  May  21,  2019,  after  receiving  a  status  update  from  the 
Government  on  the  need  for  continued  sealing,  the  Court  issued  an  order  permitting  continued 
sealing  of  the  campaign  finance  portions  of  the  Materials  to  protect  an  ongoing  investigation,  and 
directed  that  the  Government  provide  another  update  by  this  date. 

The  Government  is  no  longer  seeking  to  maintain  the  campaign  finance  portions  of  the 
Materials  under  seal  in  order  to  protect  an  ongoing  investigation.'  However,  while  the  majority  of 


'  The  Government  has  effectively  concluded  its  investigations  of  (1)  who,  besides  Michael  Cohen, 
was  involved  in  and  may  be  criminally  liable  for  the  two  campaign  finance  violations  to  which 
Cohe^lc^uiltyj^^^^^^^^^^^^^^^^l;  and  (2)  whether  certain  individuals, 

made  false  statements,  gave  false  testimony  or  otherwise  obstructed  justice  in 
connection  with  this  investigation 
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the  campaign  finance  portions  of  the  Materials  can  now  be  unsealed,  the  Government  respectfully 
submits  that  some  redactions  should  be  maintained  in  order  to  protect  the  personal  privacy  of 
certain  individuals.  In  particular,  consistent  with  the  Court’s  prior  Order,  the  Government  seeks 
to  redact  references  to  individuals  who  are  either  (1)  ‘“peripheral  characters’  for  whom  the 
Materials  raise  little  discemable  inference  of  criminal  conduct”  but  who  “may  nonetheless  be 
‘stigmatized’”  by  their  inclusion  in  the  Materials;  or  (2)  people  “around  Cohen  from  which  the 
public  might  infer  criminal  complicity.”  (Order  at  14).  However,  while  most  references  to  such 
individuals  are  redacted,  the  Government  does  not  seek  to  redact  references  to  those  individuals 
that  are  either  (a)  facts  that  have  been  publicly  confirmed,  either  by  the  individual  in  public 
statements  or  the  Government  in  public  filings;  or  (b)  facts  sourced  from  publicly  available 
materials.  (See  Order  at  15  (“Shielding  third  parties  from  unwanted  attention  arising  from  an  issue 
that  is  already  public  knowledge  is  not  a  sufficiently  compelling  reason  to  justify  withholding 
judicial  documents  from  public  scrutiny.”)). 

Together  with  this  letter,  the  Government  has  transmitted  a  copy  of  one  of  the  search 
warrant  affidavits  with  the  proposed  redactions  marked.  See  Ex.  A,  at  38-57,  66-67,  71,  73-74, 
83-101.  (The  proposed  redactions  also  include  the  privacy-based  redactions  previously  authorized 
in  the  bank  and  tax  portions  of  the  Materials.)  The  Government  respectfully  requests  that  the  Court 
approve  these  redactions,  and  will  submit  corresponding  redactions  to  the  other  affidavits  (which 
are  substantially  similar  to  the  attached  affidavit)  once  the  Court  has  ruled  on  these  proposed 
redactions. 


Respectfully  submitted. 


AUDREY  STRAUSS 
Attorney  for  the  United  States, 

Acting  Under  Authority  Conferred  by 
28  U.S.C.  §  515 


By: 


Assistant  United  States  Attorneys 
(212)  637-2200 


cc:  Counsel  of  Record  (by  ECF) 


